CVE-2021-3025 | BDVDB-2026-147142 Detail

Description#

Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API (the sortDir parameter in a sortBy=popular action to the GETindex() method in applications/downloads/api/files.php).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://invisioncommunity.com/release-notes/
http://packetstormsecurity.com/files/160830/IPS-Community-Suite-4.5.4-SQL-Injection.html

Exploit#

No public exploit known

History#

Version 12021-01-08Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.