Invision Power Board versions 3.4.7 and below suffer from a remote SQL injection vulnerability. Continue reading...