CVE-2007-3219

HighCVSS 7.8/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in sources/action_public/xmlout.php in Invision Power Board (IPB or IP.Board) 2.2.0 through 2.2.2 allows remote attackers to modify another user's profile data, such as an AIM screen name or Yahoo! identity.

Metrics

CVSS 2.0 7.8/10AV:N/AC:L/Au:N/C:N/I:C/A:N

Affected software

No affected versions have been published.

Timeline

Published
Jun 14, 2007
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2007

CVE-2007-32206.8PHP remote file inclusion vulnerability in admin/editor2/spaw_control.class.php in the Cjay Content 3 module for XOOPS allows remote attackeCVE-2007-32216.8PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the XT-Conteudo module for XOOPS allows remote attackers to CVE-2007-32227.5PHP remote file inclusion vulnerability in modify.php in the XFsection 1.07 module for XOOPS allows remote attackers to execute arbitrary PHCVE-2007-32237.8Unspecified vulnerability in the NFS server in Sun Solaris 10 before 20070613 allows remote attackers to cause a denial of service (system cCVE-2007-32245.0Unspecified vulnerability in Sun ONE/Java System Directory Server (slapd) 6.0, and 5.x before 5.2 Patch 5, allows remote attackers to determCVE-2007-32256.4Unspecified vulnerability in Sun Java System Directory Server (slapd) 6.0, and 5.2 with Patch 3 or 4, allows remote attackers to modify certCVE-2007-32264.3Cross-site scripting (XSS) vulnerability in dotProject before 2.1 RC2 allows remote attackers to inject arbitrary web script or HTML via unsCVE-2007-32274.3Cross-site scripting (XSS) vulnerability in the to_json (ActiveRecord::Base#to_json) function in Ruby on Rails before edge 9606 allows remotCVE-2007-32286.8PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite CMS 4.2.12 and earlierCVE-2007-32296.8index.php in Singapore Gallery allows remote attackers to obtain sensitive information via a request with a non-directory gallery parameter,CVE-2007-32306.8PHP remote file inclusion vulnerability in phphtml.php in Idan Sofer PHP::HTML 0.6.4 allows remote attackers to execute arbitrary PHP code vCVE-2007-32317.5Buffer overflow in MeCab before 0.96 has unknown impact and attack vectors.
CVE-2007-3219: High severity, CVSS 7.8 | Vulnix