CVE-2005-2542: Invision Power Services Invision Board

Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days.

Invision Power Board (IPB) 1.0.3 allows remote attackers to inject arbitrary web script or HTML via an attachment, which is automatically downloaded and processed as HTML.

Affected products

• Invision Power Services Invision Board: version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.0_alpha_3 only; …

Published 2005-08-10. Last modified 2026-06-16.