IPS Community Suite 4.5.4 SQL Injection

----------------------------------------------------------------------------- IPS Community Suite sortBy == 'popular' 56. 57. \IPS\Request::i-sortDir = \IPS\Request::i-sortDir ?: 'ASC'; 58. $sortBy = 'filerating ' . \IPS\Request::i-sortDir . ', filereviews'; 59. $where = array array 'filerating?'...

CVE-2021-3026

Invision Community IPS Community Suite before 4.5.4.2 allows XSS during the quoting of a post or comment...

CVE-2021-3026

Invision Community IPS Community Suite before 4.5.4.2 allows XSS during the quoting of a post or comment...

CVE-2021-3026

Invision Community IPS Community Suite before 4.5.4.2 allows XSS during the quoting of a post or comment...

CVE-2021-3026

CVE-2021-3026 affects Invision Community IPS Community Suite prior to 4.5.4.2 and enables cross-site scripting during the quoting of a post or comment. The issue is described as XSS in the quoting workflow, with multiple external records corroborating the vulnerability. The provided documents do ...

IPS Community Suite Remote Code Execution (CVE-2016-6174)

A remote code execution vulnerability exists in IPS Community Suite. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Invision Power Services Community Suite Cross-Site Scripting Vulnerability

Invision Power Services IPS Community Suite is an integrated application for building communities on the web. A cross-site scripting vulnerability exists in Announcements in IPS Community Suite 4.1.19.2 and earlier. A remote attacker can exploit this vulnerability by leveraging the...

Invision Power Services Community Suite IPS UTF8 Converter Cross Site Scripting Vulnerability

Invision Power Services IPS Community Suite is an integrated application for building communities on the web.IPS UTF8 Converter is one of these transcoders. A cross-site scripting vulnerability exists in IPS UTF8 Converter version 1.1.18 in IPS Community Suite 4.1.19.2 and earlier. A remote...

Invision Power Services Community Suite Cross-Site Scripting Vulnerability (CNVD-2017-06920)

Invision Power Services IPS Community Suite is an integrated application for building communities on the web. A cross-site scripting vulnerability exists in IPS Community Suite versions 4.1.19.2 and earlier. A remote attacker could exploit this vulnerability to gain access to...

Cross site scripting

Invision Power Services IPS Community Suite 4.1.19.2 and earlier has pre-auth reflected XSS in the IPS UTF8 Converter v1.1.18: admin/convertutf8/index.php?controller= is the attack vector. This UTF8 Converter vulnerability can easily be used to make a malicious announcement affecting any Invision...

Cross site scripting

Invision Power Services IPS Community Suite 4.1.19.2 and earlier has stored XSS in the Announcements, allowing privilege escalation from an Invision Power Board moderator to an admin. An attack uses the announcecontent parameter in an index.php?/modcp/announcements/&action=create request. This is...

Design/Logic Flaw

Invision Power Services IPS Community Suite 4.1.19.2 and earlier has a composite of Stored XSS and Information Disclosure issues in the attachments feature found in User CP. This can be triggered by any Invision Power Board user and can be used to gain access to moderator/admin accounts. The...

CVE-2017-8897

Invision Power Services IPS Community Suite 4.1.19.2 and earlier has pre-auth reflected XSS in the IPS UTF8 Converter v1.1.18: admin/convertutf8/index.php?controller= is the attack vector. This UTF8 Converter vulnerability can easily be used to make a malicious announcement affecting any Invision...

CVE-2017-8898

Invision Power Services IPS Community Suite 4.1.19.2 and earlier has stored XSS in the Announcements, allowing privilege escalation from an Invision Power Board moderator to an admin. An attack uses the announcecontent parameter in an index.php?/modcp/announcements/&action=create request. This is...

CVE-2017-8899

Invision Power Services IPS Community Suite 4.1.19.2 and earlier has a composite of Stored XSS and Information Disclosure issues in the attachments feature found in User CP. This can be triggered by any Invision Power Board user and can be used to gain access to moderator/admin accounts. The...

CVE-2017-8898

Invision Power Services IPS Community Suite 4.1.19.2 and earlier has stored XSS in the Announcements, allowing privilege escalation from an Invision Power Board moderator to an admin. An attack uses the announcecontent parameter in an index.php?/modcp/announcements/&action=create request. This is...

CVE-2017-8897

CVE-2017-8897 affects Invision Power Services Community Suite (IPS) 4.1.19.2 and earlier, via the IPS UTF8 Converter v1.1.18. It is a pre-auth reflected Cross-Site Scripting (XSS) vulnerability exploitable through admin/convertutf8/index.php?controller=, potentially allowing a crafted announcemen...

CVE-2017-8898

CVE-2017-8898 affects Invision Power Services (IPS) Community Suite v4.1.19.2 and earlier. A stored XSS vulnerability exists in the Announcements feature, enabling privilege escalation from a moderator to an administrator. The attack uses the announce_content parameter via the index.php?/modcp/an...

CVE-2017-8897

Invision Power Services IPS Community Suite 4.1.19.2 and earlier has pre-auth reflected XSS in the IPS UTF8 Converter v1.1.18: admin/convertutf8/index.php?controller= is the attack vector. This UTF8 Converter vulnerability can easily be used to make a malicious announcement affecting any Invision...

CVE-2017-8898

Invision Power Services IPS Community Suite 4.1.19.2 and earlier has stored XSS in the Announcements, allowing privilege escalation from an Invision Power Board moderator to an admin. An attack uses the announcecontent parameter in an index.php?/modcp/announcements/&action=create request. This is...