SQL injection vulnerability in the do_mmod function in mod.php in Invision Community Blog (ICB) 1.1.2 final through 1.2 allows remote attackers with moderator privileges to execute arbitrary SQL commands via the selectedbids parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Invision_community_blog | Invision_power_services | 1.0 (including) | 1.0 (including) |
| Invision_community_blog | Invision_power_services | 1.1 (including) | 1.1 (including) |
| Invision_community_blog | Invision_power_services | 1.1.2_final (including) | 1.1.2_final (including) |
| Invision_community_blog | Invision_power_services | 1.2 (including) | 1.2 (including) |