CVE-2004-0355: Invision Power Services Invision Board

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

Invision Power Board 1.3 Final allows remote attackers to gain sensitive information by selecting a file for "Personal Photo" that is not an image file, which displays the installation path in an error message.

Affected products

• Invision Power Services Invision Board: version 1.3 only

Published 2004-11-23. Last modified 2026-06-16.