Invision Power Board version 1.3.1 Final is susceptible to cross site scripting and SQL injection attacks.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33515/invision131.txt
Source: https://packetstormsecurity.com/files/33515/invision131.txt.html