CVE-2017-8898

CVE-2017-8898 affects Invision Power Services (IPS) Community Suite v4.1.19.2 and earlier. A stored XSS vulnerability exists in the Announcements feature, enabling privilege escalation from a moderator to an administrator. The attack uses the announce_content parameter via the index.php?/modcp/an...

CVE-2017-8897

CVE-2017-8897 affects Invision Power Services Community Suite (IPS) 4.1.19.2 and earlier, via the IPS UTF8 Converter v1.1.18. It is a pre-auth reflected Cross-Site Scripting (XSS) vulnerability exploitable through admin/convertutf8/index.php?controller=, potentially allowing a crafted announcemen...

Invision Power Services Community Suite Security Bypass Vulnerability

Invision Power Services IPS Community Suite is an integrated application for building communities on the web. A security bypass vulnerability exists in versions of IPS Community Suite prior to 4.1.9. An attacker could exploit the vulnerability to hijack a session...

CVE-2016-2564

Invision Power Services IPS Community Suite before 4.1.9 makes session hijack easier by relying on the PHP uniqid function without the moreentropy flag. Attackers can guess an Invision Power Board session cookie if they can predict the exact time of cookie generation...

CVE-2016-2564

Invision Power Services IPS Community Suite before 4.1.9 makes session hijack easier by relying on the PHP uniqid function without the moreentropy flag. Attackers can guess an Invision Power Board session cookie if they can predict the exact time of cookie generation...

CVE-2016-2564

Affected product: Invision Power Services (IPS) Community Suite

CVE-2016-2564

Invision Power Services IPS Community Suite before 4.1.9 makes session hijack easier by relying on the PHP uniqid function without the moreentropy flag. Attackers can guess an Invision Power Board session cookie if they can predict the exact time of cookie generation...

Steam Profile Integration 2.0.11 SQL Injection

Exploit Title: IPS Community Suite - Steam Profile Integration 2.0.11 and below SQL injection Google Dork: inurl:tab=nodesteamsteamprofile Date: 13/03/2017 Exploit Author: DrWhat Vendor Homepage: https://invisionpower.com/files/file/8170-steam-profile-integration/ Software Link:...

Steam Profile Integration 2.0.11 - SQL injection

Exploit Title: IPS Community Suite - Steam Profile Integration 2.0.11 and below SQL injection Google Dork: inurl:tab=nodesteamsteamprofile Date: 13/03/2017 Exploit Author: DrWhat Vendor Homepage: https://invisionpower.com/files/file/8170-steam-profile-integration/ Software Link:...

IPS Community Suite PHP remote code execution vulnerability analysis-vulnerability warning-the black bar safety net

“IPS Community Suite “is a widely used in foreign countries the establishment of the station system. Recent is exposed in 4. 1. 1 2. 3 version and the following version there is a code injection vulnerability. This vulnerability via the control contentclass parameters submit the request to inject...

IPS Community Suite PHP remote code execution vulnerability analysis(CVE-2 0 1 6-6 1 7 4)-vulnerability warning-the black bar safety net

“IPS Community Suite”is a foreign of the more common CMS. But in its 4. 1. 1 2. 3 version and the following version, there is a PHP code injection vulnerability that stems from the procedures fail to adequately filter contentclass request parameters. A remote attacker may exploit this vulnerabili...

IPS Community Suite RCE

Remote Code Execution in IPS Community Suite Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

IPS Community Suite <= 4.1.12.3 Autoloaded PHP remote code execution vulnerability

Details source: The know Chong Yu 404 security lab A vulnerability overview 1. Vulnerability information "IPS Community Suite "is a foreign of the more common cms. But in its 4. 1. 12. 3 version and the following version, there is a PHP code injection vulnerability that stems from the procedures...

CVE-2016-6174

applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite aka Invision Power Board, IPB, or Power Board before 4.1.13, when used with PHP before 5.4.24 or 5.5.x before 5.5.8, allows remote attackers to execute arbitrary code via the contentclass parameter...

Code injection

applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite aka Invision Power Board, IPB, or Power Board before 4.1.13, when used with PHP before 5.4.24 or 5.5.x before 5.5.8, allows remote attackers to execute arbitrary code via the contentclass parameter...

CVE-2016-6174

CVE-2016-6174 affects IPS Community Suite (Invision Power Board) prior to 4.1.13. The flaw is in applications/core/modules/front/system/content.php where the content_class parameter can enable remote arbitrary code execution when used with PHP versions older than 5.4.24 (or 5.5.x older than 5.5.8...

IPS Community Suite 4.1.12.3 - PHP Code Injection

Exploit for php platform in category web applications --------------------------------------------------------------------------- IPS Community Suite contentclass ; 39. 40. if ! classexists $class or ! inarray 'IPS\Content', classparents $class 41. 42. \IPS\Output::i-error 'nodeerror', '2S226/2',...

IPS Community Suite 4.1.12.3 PHP Code Injection

--------------------------------------------------------------------------- IPS Community Suite contentclass ; 39. 40. if ! classexists $class or ! inarray 'IPS\Content', classparents $class 41. 42. \IPS\Output::i-error 'nodeerror', '2S226/2', 404, '' ; 43. User input passed through the...

Invision Power Services IPS Community Suite Cross-Site Scripting Vulnerability

Invision Power Services IPS Community Suite is a PHP and MySQL based Web forum program from Invision Power Services, Inc. A cross-site scripting vulnerability in version 4.x prior to Invision Power Services IPS Community Suite 4.0.12.1 allows remote, authenticated users to submit a calendar //...

Invision Power Services IPS Community Suite Resource Management Error Vulnerability

Invision Power Services IPS Community Suite a.k.a. Invision Power Board, IPB or Power Board is a PHP and MySQL based Web forum program from Invision Power Services, Inc. A security vulnerability exists in Invision Power Services IPS Community Suite 4.0.11 and earlier versions, which can be...