CVE-2014-9239
No CVSS score yet. EPSS 1.4% chance of exploitation in the next 30 days.
SQL injection vulnerability in the IPS Connect service (interface/ipsconnect/ipsconnect.php) in Invision Power Board (aka IPB or IP.Board) 3.3.x and 3.4.x through 3.4.7 before 20141114 allows remote attackers to execute arbitrary SQL commands via the id[] parameter.
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- invisioncommunity:invision_power_board
- invisionpower:invision_power_board
References
- http://community.invisionpower.com/blogs/entry/9704-active-security-exploit/
- http://community.invisionpower.com/blogs/entry/9705-ipboard-33x-34x-security-update/
- http://seclists.org/fulldisclosure/2014/Nov/20
- http://community.invisionpower.com/blogs/entry/9704-active-security-exploit/
- http://community.invisionpower.com/blogs/entry/9705-ipboard-33x-34x-security-update/