CVE-2007-5688: Invision Power Services Invision Power Board

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in directory.php in the Multi-Forums (aka Multi Host Forum Pro) module 1.3.3, for phpBB and Invision Power Board (IPB or IP.Board), allow remote attackers to execute arbitrary SQL commands via the (1) go and (2) cat parameters.

Affected products

• Invision Power Services Invision Power Board: any version
• Phpbb Phpbb: any version
• Sebflipper Multi-Forums Module: version 1.3.3 only

Published 2007-10-29. Last modified 2026-06-16.