← Database

CVE-2007-2349

MEDIUM CVSS: 5.8 Published: 2007-04-30 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in Invision Power Board (IP.Board) 2.1.x and 2.2.x allows remote attackers to inject arbitrary web script or HTML by uploading crafted images or PDF files.

Affected Platforms

Invision Power Services Invision Power Board

Weakness Type

NVD-CWE-Other

References