Read the docs

Invisionpower

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Invisionpower records in CISA KEV

No Invisionpower vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Invision Power Board 4 records MEDIUM Ibphotohost 1 record LOW Ip.nexus 1 record LOW

Records

6 records

TI-2014-07500 CVE-2014-9239 · GHSA-ffwx-gcgv-gv97

SQL injection vulnerability in the IPS Connect service…

Priority LOW 36

SQL injection vulnerability in the IPS Connect service (interface/ipsconnect/ipsconnect.php) in Invision Power Board (aka IPB or IP.Board) 3.3.x and 3.4.x through 3.4.7 before 20141114 allows remote attackers to execute…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01358 Published 2014-12-03 No fix listed CWE-89
TI-2006-00612 CVE-2006-0633 · GHSA-8g89-7pph-hvr4

The make_password function in ipsclass.php in Invision Power Board (IPB) 2.1.4 uses…

Priority LOW 31

The make_password function in ipsclass.php in Invision Power Board (IPB) 2.1.4 uses random data generated from partially predictable seeds to create the authentication code that is sent by e-mail to a user with a lost pa…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.012 Published 2006-02-10 No fix listed CWE-287
TI-2015-05711 CVE-2015-6810 · GHSA-cxwq-372h-pr95

Cross-site scripting (XSS) vulnerability in Invision Power Services IPS Community Suite…

Priority LOW 20

Cross-site scripting (XSS) vulnerability in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) 4.x before 4.0.12.1 allows remote authenticated users to inject arbitrary web script…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01346 Published 2015-09-04 No fix listed CWE-79
Open these records in search →