Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Invisionpower Component: Invision Power Board Clear all filters
TI-2015-05711 CVE-2015-6810 · GHSA-cxwq-372h-pr95

Cross-site scripting (XSS) vulnerability in Invision Power Services IPS Community Suite…

Priority LOW 20

Cross-site scripting (XSS) vulnerability in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) 4.x before 4.0.12.1 allows remote authenticated users to inject arbitrary web script…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01346 Published 2015-09-04 No fix listed CWE-79
TI-2014-07500 CVE-2014-9239 · GHSA-ffwx-gcgv-gv97

SQL injection vulnerability in the IPS Connect service…

Priority LOW 36

SQL injection vulnerability in the IPS Connect service (interface/ipsconnect/ipsconnect.php) in Invision Power Board (aka IPB or IP.Board) 3.3.x and 3.4.x through 3.4.7 before 20141114 allows remote attackers to execute…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01358 Published 2014-12-03 No fix listed CWE-89
TI-2006-00612 CVE-2006-0633 · GHSA-8g89-7pph-hvr4

The make_password function in ipsclass.php in Invision Power Board (IPB) 2.1.4 uses…

Priority LOW 31

The make_password function in ipsclass.php in Invision Power Board (IPB) 2.1.4 uses random data generated from partially predictable seeds to create the authentication code that is sent by e-mail to a user with a lost pa…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.012 Published 2006-02-10 No fix listed CWE-287