CVE-2016-6174

HIGH · 8.1 CVSS Gepubliceerd: 12-07-2016

Beschrijving

applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) before 4.1.13, when used with PHP before 5.4.24 or 5.5.x before 5.5.8, allows remote attackers to execute arbitrary code via the content_class parameter.

Vendors

Invisioncommunity Php

Affected products

Invision Power Board Php

References

karmainsecurity.com
lists.apple.com
packetstormsecurity.com
seclists.org
www.securityfocus.com
invisionpower.com
support.apple.com
www.exploit-db.com