high8.8
CVE-2014-4928
SQL injection vulnerability in Invision Power Board (aka IPB or IP.Board) before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the cId pa…
Impact
SQL injection vulnerability in Invision Power Board (aka IPB or IP.Board) before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the cId parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Invisioncommunity | Invision Power Board | before 3.4.6 |