Invision Power Board Security Vulnerabilities and Issues — Invision Power Board CVE List

Lucene search

InvisioncommunityInvision Power Board

3 matches found

CVE•added 2016/07/12 7:59 p.m.•160 views

CVE-2016-6174

applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) before 4.1.13, when used with PHP before 5.4.24 or 5.5.x before 5.5.8, allows remote attackers to execute arbitrary code via the content_class parameter.

8.1CVSS8.3AI score0.19825EPSS

CVE•added 2018/03/20 9:29 p.m.•50 views

CVE-2014-4928

SQL injection vulnerability in Invision Power Board (aka IPB or IP.Board) before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the cId parameter.

8.8CVSS9.2AI score0.0039EPSS

CVE•added 2017/05/11 5:29 p.m.•36 views

CVE-2017-8899

Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has a composite of Stored XSS and Information Disclosure issues in the attachments feature found in User CP. This can be triggered by any Invision Power Board user and can be used to gain access to moderator/admin accounts. The prim...

8.1CVSS7.5AI score0.00559EPSS