CVE-2016-6174 applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power B

What is CVE-2016-6174?

CVE-2016-6174 is a high-severity vulnerability in Php Php, published on 12 Jul 2016.

Official description

applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) before 4.1.13, when used with PHP before 5.4.24 or 5.5.x before 5.5.8, allows remote attackers to execute arbitrary code via the content_class parameter.

Which versions are affected by CVE-2016-6174?

It affects 2 products.

Products include Invisioncommunity Invision Power Board, Php Php.

How do I fix CVE-2016-6174?

No fix has been published for CVE-2016-6174 yet. Limit exposure of the affected software until one is available.

Is CVE-2016-6174 being exploited?

There is no known exploitation of CVE-2016-6174 in the wild and no public exploit code.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in Php Php

• CVE-2012-5692 Other in n/a Critical 10.0
• CVE-2013-3725 Auth bypass in n/a Critical 9.8
• CVE-2012-2226 File upload in n/a Critical 9.8
• CVE-2017-8898 Cross-site scripting in n/a Critical 9.8
• CVE-2014-4928 SQL injection in n/a High 8.8

All Php Php vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-wpfq-fvm4-44jm.