CVE-2014-4928 — SQL Injection in Invision Power Board

CWE-89 — SQL Injection3 documents3 sources
Severity
8.8HIGHNVD
EPSS
0.4%
top 41.12%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Invisioncommunity Invision Power Board
Timeline
PublishedMar 20
Latest updateMay 13

Description

SQL injection vulnerability in Invision Power Board (aka IPB or IP.Board) before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the cId parameter.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-x2jv-mv3x-rx72: SQL injection vulnerability in Invision Power Board (aka IPB or IP↗2022-05-13
▶
CVEList
CVE-2014-4928: SQL injection vulnerability in Invision Power Board (aka IPB or IP↗2018-03-20
▶
CVE-2014-4928 — SQL Injection in Invision Power Board | cvebase