IPS Community Suite PHP Code Execution

The vulnerability of the IPS\cms\modules\front\pages\builder::previewBlock method in the IPS Community Suite web forum software is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary PHP code remotely...

PT-2021-3232

Name of the Vulnerable Software and Affected Versions Invision Community aka IPS Community Suite versions prior to 4.6.0 Description The issue is related to the IPScmsmodulesfrontpages builder::previewBlock method interacting unsafely with the IPS Theme::runProcessFunction method, allowing for...

CVE-2021-32924: Improper Control of Generation of Code

Invision Community aka IPS Community Suite before 4.6.0 allows eval-based PHP code injection by a moderator because the IPS\cms\modules\front\pages\builder::previewBlock method interacts unsafely with the IPS\Theme::runProcessFunction method...