PT-2014-8894

Name of the Vulnerable Software and Affected Versions Invision Power Board versions 3.3.x through 3.4.7 Description The issue allows remote attackers to execute arbitrary SQL commands via the id parameter in the IPS Connect service, located at the "interface/ipsconnect/ipsconnect.php" endpoint...

IP.Board 3.4.x /interface/ipsconnect/ipsconnect.php SQL注入漏洞

No description provided by source...