CVE-2007-2349

Cross-site scripting (XSS) vulnerability in Invision Power Board (IP.Board) 2.1.x and 2.2.x allows remote attackers to inject arbitrary web script or HTML by uploading crafted images or PDF files.

Date published : 2007-04-30

http://forums.invisionpower.com/index.php?showtopic=234377

http://osvdb.org/35427