Invision · Invision Power Board · CVE-2006-2059
**Name of the Vulnerable Software and Affected Versions**
Invision Power Board (IPB) versions 2.0.x through 2.1.x before 20060425
**Description**
The issue allows remote attackers to execute arbitrary PHP code via a search with a crafted value of the `lastdate` parameter. This is achieved by altering the behavior of a regular expression to add a "#e" (execute) modifier in the `action public/search.php` file.
**Recommendations**
For Invision Power Board (IPB) versions 2.0.x through 2.1.x before 20060425, consider restricting access to the `action public/search.php` file until a fix is available. As a temporary workaround, avoid using the `lastdate` parameter in the search functionality to minimize the risk of exploitation.