CVE-2021-3025

Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API (the sortDir parameter in a sortBy=popular action to the…

published January 8, 2021

CVSS
—
EPSS
1%
Percentile
72.7
In the wild
Unconfirmed
What it is

Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API (the sortDir parameter in a sortBy=popular action to the GETindex() method in applications/downloads/api/files.php).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01425 · 72.7th percentile
Published
2021-01-08T06:21Z
EPSS history
Timeline
  • 08 JAN 06:21Z
    Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API (the sortDir parameter in a sortBy=popular action to the…
    cvelistv5