action_public/search.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execute arbitrary PHP code via a search with a crafted value of the lastdate parameter, which alters the behavior of a regular expression to add a "#e" (execute) modifier.
AV:N/AC:L/Au:N/C:N/I:P/A:N
This vulnerability has a 7.85% probability of being exploited in the next 30 days, ranking higher than 95% of all scored CVEs.