← Database

CVE-2006-7064

CRITICAL CVSS: 9.3 Published: 2007-02-24 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in forum/admin.php for Invision Power Board (IPB) 2.1.6 and earlier allows remote attackers to inject arbitrary web script or HTML as the administrator via the phpinfo parameter.

Affected Platforms

Invision Power Services Invision Power Board

Weakness Type

NVD-CWE-Other

References