← Database

CVE-2008-4171

HIGH CVSS: 7.5 Published: 2008-09-22 Modified: 2026-06-16

Description

SQL injection vulnerability in xmlout.php in Invision Power Board (IP.Board or IPB) 2.2.x and 2.3.x allows remote attackers to execute arbitrary SQL commands via the name parameter.

Affected Platforms

Invision Power Services Invision Power Board

Weakness Type

CWE-89

References