CVE-2006-1287

Cross-site scripting XSS vulnerability in Invision Power Board IPB 2.0.4 and 2.1.4 before 20060130 allows remote attackers to steal cookies and probably conduct other activities when the victim is using Internet Explorer...

Design/Logic Flaw

Invision Power Board IPB 2.1.4 and earlier allows remote attackers to list directory contents via a direct request to multiple directories, including 1 sources/loginauth/convert/, 2 sources/portalplugins/, 3 cache/skincache/cacheid2/, 4 ipskernel/PEAR/, 5 ipskernel/PEAR/Text/, 6...