CVE-2021-3025

PoC —

CVSS 3.1

8.8 high

EPSS

1%p71

Published

Jan 8, 2021 (Jan 8, 2021)

Modified

Jun 17, 2026

Description

Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API (the sortDir parameter in a sortBy=popular action to the GETindex() method in applications/downloads/api/files.php).

Vendors: invisioncommunity
Products: ips community suite
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.