Description
Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API (the sortDir parameter in a sortBy=popular action to the GETindex() method in applications/downloads/api/files.php).
Unscored
CVE-2021-3025
EUVD-2021-26378GHSA-fgc3-w3gg-xj3f
Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API (the sortDir parameter in a sortBy=po…
Published Jan 8, 2021 · Updated Aug 3, 2024 · Assigned by mitre