Total vulnerabilities in the database
SQL injection vulnerability in the do_mmod function in mod.php in Invision Community Blog (ICB) 1.1.2 final through 1.2 allows remote attackers with moderator privileges to execute arbitrary SQL commands via the selectedbids parameter.
| Software | From | Fixed in |
|---|---|---|
| invision_power_services / invision_community_blog | 1.1 | 1.1.x |
| invision_power_services / invision_community_blog | 1.0 | 1.0.x |
| invision_power_services / invision_community_blog | 1.1.2_final | 1.1.2_final.x |
| invision_power_services / invision_community_blog | 1.2 | 1.2.x |