CVE-2014-4928: Invisioncommunity Invision Power Board

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in Invision Power Board (aka IPB or IP.Board) before 3.4.6 allows remote attackers to execute arbitrary SQL commands via the cId parameter.

Affected products

• Invisioncommunity Invision Power Board: before 3.4.6 (fixed in 3.4.6)

Published 2018-03-20. Last modified 2026-06-17.