CVE-2006-2060

no score yetEPSS 2.2%

invision power services invision power board: no CVSS score yet. EPSS 2.2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in action_admin/paysubscriptions.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote authenticated administrators to include and execute arbitrary local PHP files via a .. (dot dot) in the name parameter, preceded by enough backspace (%08) characters to erase the initial static portion of a filename.

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-10-31)
Published: 2006-04-26
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

invision_power_services:invision_power_board

References

http://forums.invisionpower.com/index.php?showtopic=213374
http://secunia.com/advisories/19830
http://securityreason.com/securityalert/796
http://www.osvdb.org/25008
http://www.securityfocus.com/archive/1/431990/100/0/threaded

Check your stack JSON