PatchTheCVEinvision power board vulnerabilities and fixes
Recent CVEs affecting invision power board, with upgrade or downgrade steps. 18 tracked.
Also searched as: invisionpowerboard.
invision power board has 18 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 13. Most recent: 2021-08-17. Highest priority: CVE-2012-2226 (score 68/100).
- CVE-2021-39250 MEDIUM 5.4 UPGRADE Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows stored XSS, with resultant code
- CVE-2021-39249 MEDIUM 6.1 UPGRADE Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows reflected XSS because the filen
- CVE-2019-8278 MEDIUM 6.1 UPGRADE Stored XSS in Invision Power Board versions 3.3.1 - 3.4.8 leads to Remote Code Execution.
- CVE-2017-8899 HIGH 8.1 UPGRADE Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has a composite of Stored XSS and Informati
- CVE-2017-8898 CRITICAL 9.8 UPGRADE Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has stored XSS in the Announcements, allowi
- CVE-2017-8897 MEDIUM 6.1 UPGRADE Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has pre-auth reflected XSS in the IPS UTF8
- CVE-2016-6174 HIGH 8.1 UPGRADE UPGRADE applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite (aka Invisio
- CVE-2016-2564 MEDIUM 5.9 UPGRADE Invision Power Services (IPS) Community Suite before 4.1.9 makes session hijack easier by relying on the PHP u
- CVE-2015-6812 HIGH 7.8 UPGRADE Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) before 4.0.12.1 al
- CVE-2015-6810 LOW 3.5 DOWNGRADE Cross-site scripting (XSS) vulnerability in Invision Power Services IPS Community Suite (aka Invision Power Bo
- CVE-2014-9239 HIGH 7.5 DOWNGRADE DOWNGRADE SQL injection vulnerability in the IPS Connect service (interface/ipsconnect/ipsconnect.php) in Invision Power
- CVE-2014-5106 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Invision Power IP.Board (aka IPB or Power Board) 3.4.x through 3.4
- CVE-2014-4928 HIGH 8.8 UPGRADE SQL injection vulnerability in Invision Power Board (aka IPB or IP.Board) before 3.4.6 allows remote attackers
- CVE-2014-3149 MEDIUM 4.3 DOWNGRADE DOWNGRADE Cross-site scripting (XSS) vulnerability in Invision Power IP.Board (aka IPB or Power Board) 3.3.x and 3.4.x t
- CVE-2013-3725 CRITICAL 9.8 UPGRADE Invision Power Board (IPB) through 3.x allows admin account takeover leading to code execution.
- CVE-2012-5692 HIGH 10.0 DOWNGRADE DOWNGRADE Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x t
- CVE-2012-2226 CRITICAL 9.8 UPGRADE Invision Power Board before 3.3.1 fails to sanitize user-supplied input which could allow remote attackers to
- CVE-2009-5159 MEDIUM 6.1 UPGRADE DOWNGRADE Invision Power Board (aka IPB or IP.Board) 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via
FAQ
How do I fix invision power board vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is invision power board being exploited right now?
None of the tracked invision power board CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which invision power board CVE should I patch first?
CVE-2012-2226 currently ranks highest (68/100): Invision Power Board before 3.3.1 fails to sanitize user-supplied input which could allow remote attackers to .