CVE-2021-3025

Published: 2021-01-08T07:15Z

Last Modified: 2024-11-21T06:20Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API (the sortDir parameter in a sortBy=popular action to the GETindex() method in applications/downloads/api/files.php). > MITRE Terms of Use apply – see LICENSE‑MITRE.txt