Cloudanix VulnDB

CVE-2016-6174

High · 8.1

CVSS

8.1

EPSS

12.3%

Published

Jul 12, 2016

CISA due date

—

The record

applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) before 4.1.13, when used with PHP before 5.4.24 or 5.5.x before 5.5.8, allows remote attackers to execute arbitrary code via the content_class parameter.

Affected packages

Ecosystem Package Introduced Fixed