Invision Power Board (IPB) through 3.x allows admin account takeover leading to code execution.
Invision Power Board
Vulnerability
CVE-2013-3725
NVD
Refer to CVE-2013-3725 NVD advisory