Invisionpower

6 CVEs across 3 Invisionpower products. Browse Invisionpower vulnerabilities, severities, and proof-of-concept exploits.

Invisionpower products with known CVEs

ProductCVEs
Invision Power Board4
Ibphotohost1
Ip.nexus1
Invisionpower CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2015-68102015-09-04Cross-site scripting (XSS) vulnerability in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) 4.x before 4.0.12.1 all…
CVE-2014-92392014-12-03SQL injection vulnerability in the IPS Connect service (interface/ipsconnect/ipsconnect.php) in Invision Power Board (aka IPB or IP.Board) 3.3.x and 3.4.x thro…
CVE-2014-31492014-07-03Cross-site scripting (XSS) vulnerability in Invision Power IP.Board (aka IPB or Power Board) 3.3.x and 3.4.x through 3.4.6, as downloaded before 20140424, or I…
CVE-2012-56922012-10-31Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3.x has unknown impact and remote attack…
CVE-2010-36012010-09-24SQL injection vulnerability in index.php in ibPhotohost 1.1.2 allows remote attackers to execute arbitrary SQL commands via the img parameter.
CVE-2006-06332006-02-10The make_password function in ipsclass.php in Invision Power Board (IPB) 2.1.4 uses random data generated from partially predictable seeds to create the authen…