SQL injection vulnerability in Invision Power Board (aka IPB or IP.Board) before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the cId parameter.
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HInvisioncommunity Invision Power Board
APPInvisioncommunity< 3.4.6
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SQLi
CWE
Related vulnerabilities
CVE-2013-3725CRITICAL9.8PL ✓same product
Przejęcie konta admina i RCE w Invision Power Board (IPB) do wersji 3.x
CVE-2012-2226CRITICAL9.8PL ✓same product
Invision Power Board — upload złośliwego pliku umożliwia RCE
CVE-2017-8898CRITICAL9.8PL ✓same product
Stored XSS w Invision Power Board umożliwiający privilege escalation do admina
CVE-2017-8899HIGH8.1same product
Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has a composite of Stored XSS and Informati...
CVE-2016-6174HIGH8.1same product
applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite (aka Invisio...