Vulnerabilities

TI-2015-05711 CVE-2015-6810 · GHSA-cxwq-372h-pr95

Cross-site scripting (XSS) vulnerability in Invision Power Services IPS Community Suite…

LOW 20

Cross-site scripting (XSS) vulnerability in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) 4.x before 4.0.12.1 allows remote authenticated users to inject arbitrary web script…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01346 Published 2015-09-04 No fix listed CWE-79

TI-2014-07500 CVE-2014-9239 · GHSA-ffwx-gcgv-gv97

SQL injection vulnerability in the IPS Connect service…

LOW 36

SQL injection vulnerability in the IPS Connect service (interface/ipsconnect/ipsconnect.php) in Invision Power Board (aka IPB or IP.Board) 3.3.x and 3.4.x through 3.4.7 before 20141114 allows remote attackers to execute…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01358 Published 2014-12-03 No fix listed CWE-89

TI-2014-02514 CVE-2014-3149 · GHSA-972c-f7qw-2ffg

Cross-site scripting (XSS) vulnerability in Invision Power IP.Board (aka IPB or Power…

LOW 24

Cross-site scripting (XSS) vulnerability in Invision Power IP.Board (aka IPB or Power Board) 3.3.x and 3.4.x through 3.4.6, as downloaded before 20140424, or IP.Nexus 1.5.x through 1.5.9, as downloaded before 20140424, a…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01936 Published 2014-07-03 No fix listed CWE-79

TI-2012-04789 CVE-2012-5692 · GHSA-mfrm-r98f-cf43

Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB…

MEDIUM 64

Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3.x has unknown impact and remote attack vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.26049 Published 2012-10-31 No fix listed

TI-2010-03430 CVE-2010-3601 · GHSA-wqqp-m5cv-27cj

SQL injection vulnerability in index.php in ibPhotohost 1.1.2 allows remote attackers to…

LOW 35

SQL injection vulnerability in index.php in ibPhotohost 1.1.2 allows remote attackers to execute arbitrary SQL commands via the img parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00973 Published 2010-09-24 No fix listed CWE-89

TI-2006-00612 CVE-2006-0633 · GHSA-8g89-7pph-hvr4

The make_password function in ipsclass.php in Invision Power Board (IPB) 2.1.4 uses…

LOW 31

The make_password function in ipsclass.php in Invision Power Board (IPB) 2.1.4 uses random data generated from partially predictable seeds to create the authentication code that is sent by e-mail to a user with a lost pa…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.012 Published 2006-02-10 No fix listed CWE-287