CVE:CVE-2007-3219
CNNVD:CNNVD-200706-236
Invision Power Board 的sources/action_public/xmlout.php中存在未明漏洞。远程攻击者可以修改其他用户的资料数据，比如AIM屏幕名或Yahoo!识别。
solution:Upgrade invision_power_services invision_power_board to a higher version than 2.2,2.2.1,2.2.2,and avoid the version 2.2,2.2.1,2.2.2