Isn't that the same code as this, but with the credits ripped? http://www.milw0rm.com/id.php?id=1013 Also, your "discovery" is _OLD_ news. http://forums.invisionpower.com/index.php?showtopic=168016 I see hackerscenter.com uses Invision Power Board. If you guys are just now finding out about this exploit then you may want to start investigating your server logs. Anyway, thanks hackerscenter.com for another l33t advisory! :-D