CVE-2002-1149: Invision Power Services Invision Board

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

The installation procedure for Invision Board suggests that users install the phpinfo.php program under the web root, which leaks sensitive information such as absolute pathnames, OS information, and PHP settings.

Affected products

• Invision Power Services Invision Board: version 1.0 only; version 1.0.1 only

Published 2002-10-11. Last modified 2026-06-16.