CRITICAL🇵🇱 Wersja polska

CVE-2013-3725

CVSS 9.8v3.1pub. 2020-02-12upd. 2024-11-21

Invision Power Board (IPB) through 3.x allows admin account takeover leading to code execution.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Invisioncommunity Invision Power Board

    APP
    Invisioncommunity
    < 4.0.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2012-2226CRITICAL9.8PL ✓same product

Invision Power Board — upload złośliwego pliku umożliwia RCE

CVE-2017-8898CRITICAL9.8PL ✓same product

Stored XSS w Invision Power Board umożliwiający privilege escalation do admina

CVE-2014-4928HIGH8.8same product

SQL injection vulnerability in Invision Power Board (aka IPB or IP.Board) before 3.4.6 allows remote attackers...

CVE-2017-8899HIGH8.1same product

Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has a composite of Stored XSS and Informati...

CVE-2016-6174HIGH8.1same product

applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite (aka Invisio...