Login Request a demo
IN
Vendor
Invisioncommunity
5 products with CVEs on record
27
CVEs
0
On KEV
0
New 30D
Products
IP
Invision Power Board
Invisioncommunity
9.8
19 CVEs0 on KEV0 new
IC
Ips Community Suite
Invisioncommunity
9.1
4 CVEs0 on KEV0 new
IN
Invisioncommunity
Invisioncommunity
9.8
2 CVEs0 on KEV0 new
CO
Community
Invisioncommunity
4.8
1 CVEs0 on KEV0 new
GA
Gallery
Invisioncommunity
4.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-47916
IN
Invisioncommunity
Invisioncommunity
9.8
84%
May 16Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php
CVE-2024-30163
IN
Invisioncommunity
Invisioncommunity
9.8
9%
Jun 7Invision Community before 4.7.16 allow SQL injection via the applications/nexus/modules/front/store/store.php IPS\nexus\modules\front\store\_store::_categoryView() method, where…
CVE-2021-40604
IC
Ips Community Suite
Invisioncommunity
9.1
1%
Jun 13A Server-Side Request Forgery (SSRF) vulnerability in IPS Community Suite before 4.6.2 allows remote authenticated users to request arbitrary URLs or trigger deserialization via…
CVE-2021-39250
IP
Invision Power Board
Invisioncommunity
5.4
1%
Aug 17Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows stored XSS, with resultant code execution, because an uploaded file can be placed in an IFRAME…
CVE-2021-39249
IP
Invision Power Board
Invisioncommunity
6.1
1%
Aug 17Invision Community (aka IPS Community Suite or IP-Board) before 4.6.5.1 allows reflected XSS because the filenames of uploaded files become predictable through a brute-force…
CVE-2021-32924
IC
Ips Community Suite
Invisioncommunity
8.8
20%
Jun 1Invision Community (aka IPS Community Suite) before 4.6.0 allows eval-based PHP code injection by a moderator because the IPS\cms\modules\front\pages\_builder::previewBlock method…
CVE-2021-3025
IC
Ips Community Suite
Invisioncommunity
8.8
1%
Jan 8Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API (the sortDir parameter in a sortBy=popular action to the GETindex() method in…
CVE-2021-3026
IC
Ips Community Suite
Invisioncommunity
6.1
1%
Jan 5Invision Community IPS Community Suite before 4.5.4.2 allows XSS during the quoting of a post or comment
CVE-2020-29477
CO
Community
Invisioncommunity
4.8
1%
Dec 30Invision Community 4.5.4 is affected by cross-site scripting (XSS) in the Field Name field
CVE-2009-5159
IP
Invision Power Board
Invisioncommunity
6.1
3%
Mar 13Invision Power Board (aka IPB or IP.Board) 2.x through 3.0.4, when Internet Explorer 5 is used, allows XSS via a .txt attachment
CVE-2013-3725
IP
Invision Power Board
Invisioncommunity
9.8
2%
Feb 12Invision Power Board (IPB) through 3.x allows admin account takeover leading to code execution
CVE-2012-2226
IP
Invision Power Board
Invisioncommunity
9.8
7%
Jan 9Invision Power Board before 3.3.1 fails to sanitize user-supplied input which could allow remote attackers to obtain sensitive information or execute arbitrary code by uploading a…
CVE-2019-8278
IP
Invision Power Board
Invisioncommunity
6.1
2%
Mar 2Stored XSS in Invision Power Board versions 3.3.1 - 3.4.8 leads to Remote Code Execution
CVE-2014-4928
IP
Invision Power Board
Invisioncommunity
8.8
1%
Mar 20SQL injection vulnerability in Invision Power Board (aka IPB or IP.Board) before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the cId parameter
CVE-2017-8899
IP
Invision Power Board
Invisioncommunity
8.1
1%
May 11Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has a composite of Stored XSS and Information Disclosure issues in the attachments feature found in User CP
CVE-2017-8898
IP
Invision Power Board
Invisioncommunity
9.8
2%
May 11Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has stored XSS in the Announcements, allowing privilege escalation from an Invision Power Board moderator to an…
CVE-2017-8897
IP
Invision Power Board
Invisioncommunity
6.1
1%
May 11Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has pre-auth reflected XSS in the IPS UTF8 Converter v1.1.18: admin/convertutf8/index.php?controller= is the…
CVE-2016-2564
IP
Invision Power Board
Invisioncommunity
5.9
1%
Apr 23Invision Power Services (IPS) Community Suite before 4.1.9 makes session hijack easier by relying on the PHP uniqid function without the more_entropy flag
CVE-2016-6174
IP
Invision Power Board
Invisioncommunity
8.1
12%
Jul 12applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) before 4.1.13, when used with PHP…
CVE-2015-6812
IP
Invision Power Board
Invisioncommunity
–
1%
Sep 4Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) before 4.0.12.1 allows remote attackers to cause a denial of service (loop and memory…
CVE-2014-9239
IP
Invision Power Board
Invisioncommunity
–
1%
Dec 3SQL injection vulnerability in the IPS Connect service (interface/ipsconnect/ipsconnect.php) in Invision Power Board (aka IPB or IP.Board) 3.3.x and 3.4.x through 3.4.7 before…
CVE-2014-5106
IP
Invision Power Board
Invisioncommunity
–
1%
Jul 28Cross-site scripting (XSS) vulnerability in Invision Power IP.Board (aka IPB or Power Board) 3.4.x through 3.4.6 allows remote attackers to inject arbitrary web script or HTML via…
CVE-2014-3149
IP
Invision Power Board
Invisioncommunity
–
2%
Jul 3Cross-site scripting (XSS) vulnerability in Invision Power IP.Board (aka IPB or Power Board) 3.3.x and 3.4.x through 3.4.6, as downloaded before 20140424, or IP.Nexus 1.5.x…
CVE-2012-5692
IP
Invision Power Board
Invisioncommunity
–
26%
Oct 31Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3.x has unknown impact and remote attack vectors
CVE-2010-3424
IP
Invision Power Board
Invisioncommunity
–
1%
Sep 16Cross-site scripting (XSS) vulnerability in admin/sources/classes/bbcode/custom/defaults.php in Invision Power Board (IP.Board) 3.1.2 allows remote attackers to inject arbitrary…
CVE-2009-3974
IP
Invision Power Board
Invisioncommunity
–
1%
Nov 18Multiple SQL injection vulnerabilities in Invision Power Board (IPB or IP.Board) 3.0.0, 3.0.1, and 3.0.2 allow remote attackers to execute arbitrary SQL commands via the (1)…
CVE-2005-1947
GA
Gallery
Invisioncommunity
4.3
0%
Jun 9Cross-site request forgery (CSRF) vulnerability in Invision Gallery before 1.3.1 allows remote attackers to delete albums and images as another user via a link or IMG tag to the…