critical9.8Public exploit code
CVE-2012-2226
Invision Power Board before 3.3.1 fails to sanitize user-supplied input which could allow remote attackers to obtain sensitive information or execute arbitrary…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Invision Power Board 3.3.0 - Local File Inclusion2012-04-13 · webapps · php
Impact
Invision Power Board before 3.3.1 fails to sanitize user-supplied input which could allow remote attackers to obtain sensitive information or execute arbitrary code by uploading a malicious file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Invisioncommunity | Invision Power Board | before 3.3.1 |