Security Advisory

CVE-2021-3025

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-01-08 06:21:36

Last updated 2024-08-03 16:45:50

Assigner mitre

State PUBLISHED

Description

Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API (the sortDir parameter in a sortBy=popular action to the GETindex() method in applications/downloads/api/files.php).

← Browse all CVEs View on cve.org ↗