CVE-2006-2498: Undefined Security Weakness

Invision Power Board IPB before 2.1.6 allows remote attackers to execute arbitrary PHP script via attack vectors involving 1 the posticon variable in classes/post/classpost.php and 2 the df value in actionpublic/moderate.php...

CVE-2006-0909: Undefined Security Weakness

Invision Power Board IPB 2.1.4 and earlier allows remote attackers to view sensitive information via a direct request to multiple PHP scripts that include the full path in error messages, including 1 PEAR/Text/Diff/Renderer/inline.php, 2 PEAR/Text/Diff/Renderer/unified.php, 3 PEAR/Text/Diff3.php,...