CVE-2016-6174

Source
https://cve.org/CVERecord?id=CVE-2016-6174
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6174.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-6174
Published
2016-07-12T19:59:09.567Z
Modified
2026-04-10T03:52:09.887553Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

applications/core/modules/front/system/content.php in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) before 4.1.13, when used with PHP before 5.4.24 or 5.5.x before 5.5.8, allows remote attackers to execute arbitrary code via the content_class parameter.

References

Affected packages

Git / github.com/php/php-src

Affected ranges

Type
GIT
Repo
https://github.com/php/php-src
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
Database specific
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.4.23"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.0-alpha1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.0-alpha2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.0-alpha3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.0-alpha4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.0-alpha5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.0-alpha6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.0-beta1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.0-beta2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.0-beta3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.0-beta4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.0-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.5.7"
        }
    ]
}

Affected versions

php-5.*
php-5.4.23
php-5.4.23RC1
php-5.5.0RC1
php-5.5.0RC2
php-5.5.0alpha1
php-5.5.0alpha2
php-5.5.0alpha3
php-5.5.0alpha4
php-5.5.0alpha5
php-5.5.0alpha6
php-5.5.0beta1
php-5.5.0beta2
php-5.5.0beta3
php-5.5.0beta4
php-5.5.1
php-5.5.2
php-5.5.3
php-5.5.4
php-5.5.5
php-5.5.6
php-5.5.7
php-5.5.7RC1
Other
php5_5_0

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-6174.json"
unresolved_ranges
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "4.1.12.3"
            }
        ]
    }
]