Invision Power Board 2.1.5 and possibly earlier versions suffer from a flaw that could allow for remote code execution.