A vulnerability has been reported in Invision Power Board, which can be exploited by malicious people to conduct cross-site scripting attacks.

It is possible to upload specially crafted image or PDF files that contain malicious HTML or script code. Since the Microsoft Internet Explorer browser tries to guess MIME types via the content, this can be exploited to execute arbitrary HTML and script code in a user's Internet Explorer session in context of an affected site.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://forums.invisionpower.com/index.php?showtopic=234377

Deep Links
Links available to Secunia VIM customers