CVE-2007-3219

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-06-14 · updated 2026-06-16

Description

Unspecified vulnerability in sources/action_public/xmlout.php in Invision Power Board (IPB or IP.Board) 2.2.0 through 2.2.2 allows remote attackers to modify another user's profile data, such as an AIM screen name or Yahoo! identity.

Affected products

Invision Power Services Invision Power Board: 2.2, 2.2.1, 2.2.2

References

http://forums.invisionpower.com/index.php?showtopic=235316
http://secunia.com/advisories/25637
http://www.osvdb.org/35436
http://www.securityfocus.com/bid/24442
http://www.vupen.com/english/advisories/2007/2160
https://exchange.xforce.ibmcloud.com/vulnerabilities/34841
http://forums.invisionpower.com/index.php?showtopic=235316
http://secunia.com/advisories/25637
http://www.osvdb.org/35436
http://www.securityfocus.com/bid/24442
http://www.vupen.com/english/advisories/2007/2160
https://exchange.xforce.ibmcloud.com/vulnerabilities/34841

Get alerted when CVE-2007-3219 or the next vulnerability affects your stack