1138 matches found
CVE-2025-47916
CVE-2025-47916 - Invision Community Remote Code Execution RCE Vulnerability About This repository provides a proof‑of‑concept description for CVE‑2025‑47916 , a Remote Code Execution vulnerability affecting Invision Community versions 5.0.0 through 5.0.6. The issue stems from improper handling of...
CVE-2025-48932-Invision-Community-SQLi-Exploit
🔓 CVE-2025-48932 - Invision Community SQL Injection Exploit ⚡ Critical Vulnerability Overview CVE-2025-48932 is a critical unauthenticated blind SQL injection vulnerability discovered in Invision Community versions ≤ 4.7.20. This exploit allows remote attackers to: 🔍 Extract sensitive database...
CVE-2025-48932---exploit
Invision Community SQL Injection Exploit CVE-2025-48932 A proof-of-concept exploit demonstrating a SQL injection vulnerability in Invision Community versions = 4.7.20. ⚠️ Disclaimer This tool is provided for educational and authorized security testing purposes ONLY. Unauthorized access to computer...
IPS Community Suite - Unauthenticated SQL Injection
IPS Community Suite is vulnerable to unauthenticated SQL injection via the filter parameter in the /index.php?/store/ endpoint, allowing attackers to extract sensitive information from the database. id: CVE-2024-30163 info: name: IPS Community Suite - Unauthenticated SQL Injection author:...
Invision Community <=5.0.6 Unauthenticated RCE via Template Injection
Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The issue lies within the themeeditor controller /applications/core/modules/front/system/themeeditor.php, where a protected method named customCss can be invoked by unauthenticated...
Exploit for CVE-2025-48932
CVE-2025-48932-Invision-Community-SQLi-Exploit CVE-2025-48932...
Invision Community makeProcessFunction Arbitrary PHP Code Execution
The vulnerability of the makeProcessFunction function in the /applications/core/modules/front/system/themeeditor.php file of the Invision Community formerly IPS Community Suite software for managing web forums involves a lack of measures to eliminate special elements in the template creation...
CVE-2005-1443
Multiple cross-site scripting XSS vulnerabilities in index.php for Invision Power Board IPB 2.0.3 and 2.1 Alpha 2 allows remote attackers to inject arbitrary web script or HTML via the 1 act, 2 Members, 3 calendar, or 4 HID parameters...
CVE-2007-4913
ipskernel/classupload.php in Invision Power Board IPB or IP.Board 2.3.1 up to 20070912 allows remote attackers to upload arbitrary script files with crafted image filenames to uploads/, where they are saved with a .txt extension and are not executable. NOTE: there are limited usage scenarios unde...
📄 Invision Community 5.0.6 customCss Expression Injection
Invision Community version 5.0.6 customCss expression injection proof of concept exploit written in PHP. ============================================================================================================================================= | Title : Invision Community 5.0.6 customCss...
Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Invisioncommunity
CVE-2025-47916 - Invision Community Remote Code Execution RCE...
EUVD-2010-3422
Malware in sbrugna...
EUVD-2005-0478
Malware in sbrugna...
EUVD-2008-4154
Malware in sbrugna...
EUVD-2006-0527
Malware in sbrugna...
EUVD-2006-0913
Malware in sbrugna...
EUVD-2003-1375
Malware in sbrugna...
EUVD-2004-1530
Malware in sbrugna...