Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2012-5692 — Invision Power Board vulnerability

6 documents4 sources
Severity
10.0CRITICALNVD
EPSS
83.0%
top 0.74%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
Invisioncommunity Invision Power BoardInvisionpower Invision Power Board
Timeline
PublishedOct 31
Latest updateMay 13

Description

Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3.x has unknown impact and remote attack vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

Patches

Patch: community.invisionpower.com ↗Patch: community.invisionpower.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-mfrm-r98f-cf43: Unspecified vulnerability in admin/sources/base/core↗2022-05-13
▶
CVEList
CVE-2012-5692: Unspecified vulnerability in admin/sources/base/core↗2012-10-31
▶

💥Exploits & PoCs

3
Exploit-DB
Invision Power Board (IP.Board) 3.3.4 - 'Unserialize()' PHP Code Execution (Metasploit)↗2012-11-13
▶
Exploit-DB
Invision Power Board (IP.Board) 3.3.4 - Unserialize Regex Bypass↗2012-11-07
▶
Exploit-DB
Invision Power Board (IP.Board) 3.3.4 - 'Unserialize()' PHP Code Execution↗2012-11-01
▶
CVE-2012-5692 — Invision Power Board vulnerability | cvebase