Total vulnerabilities in the database
ips_kernel/class_upload.php in Invision Power Board (IPB or IP.Board) 2.3.1 up to 20070912 allows remote attackers to upload arbitrary script files with crafted image filenames to uploads/, where they are saved with a .txt extension and are not executable. NOTE: there are limited usage scenarios under which this would be a vulnerability, but it is being tracked by CVE since the vendor has stated it is security-relevant.
| Software | From | Fixed in |
|---|---|---|
| invision_power_services / invision_power_board | 2.2 | 2.2.x |
| invision_power_services / invision_power_board | 2.2.2 | 2.2.2.x |
| invision_power_services / invision_power_board | 2.1.6 | 2.1.6.x |
| invision_power_services / invision_power_board | 2.1.5_2006-03-08 | 2.1.5_2006-03-08.x |
| invision_power_services / invision_power_board | 2.1.5_2006-04-25 | 2.1.5_2006-04-25.x |
| invision_power_services / invision_power_board | 2.2.1 | 2.2.1.x |
| invision_power_services / invision_power_board | - | 2.3.1.x |