VULNERABILITY INTELLIGENCE
CVE-2006-2059
CVSS score5 MEDIUM
EPSS probability8.04%
CISA KEVNot currently listed
Published2006-04-26
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
action_public/search.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary PHP code via a search with a crafted value of the lastdate parameter, which alters the behavior of a regular expression to add a "#e" (execute) modifier.