CVE-2014-4928

CVE-2014-4928 describes an SQL injection in Invision Power Board (IPB/IP.Board) prior to version 3.4.6. The vulnerability allows a remote attacker to execute arbitrary SQL commands through the cId parameter. Multiple connected documents corroborate the affected product (IPB/IP.Board) and the vuln...