IPS Community Suite - Unauthenticated SQL Injection

IPS Community Suite is vulnerable to unauthenticated SQL injection via the filter parameter in the /index.php?/store/ endpoint, allowing attackers to extract sensitive information from the database. id: CVE-2024-30163 info: name: IPS Community Suite - Unauthenticated SQL Injection author:...

CVE-2025-48932---exploit

Invision Community SQL Injection Exploit CVE-2025-48932 A proof-of-concept exploit demonstrating a SQL injection vulnerability in Invision Community versions = 4.7.20. ⚠️ Disclaimer This tool is provided for educational and authorized security testing purposes ONLY. Unauthorized access to computer...

CVE-2025-48932-Invision-Community-SQLi-Exploit

🔓 CVE-2025-48932 - Invision Community SQL Injection Exploit ⚡ Critical Vulnerability Overview CVE-2025-48932 is a critical unauthenticated blind SQL injection vulnerability discovered in Invision Community versions ≤ 4.7.20. This exploit allows remote attackers to: 🔍 Extract sensitive database...

CVE-2025-47916

CVE-2025-47916 - Invision Community Remote Code Execution RCE Vulnerability About This repository provides a proof‑of‑concept description for CVE‑2025‑47916 , a Remote Code Execution vulnerability affecting Invision Community versions 5.0.0 through 5.0.6. The issue stems from improper handling of...

Invision Community <=5.0.6 Unauthenticated RCE via Template Injection

Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The issue lies within the themeeditor controller /applications/core/modules/front/system/themeeditor.php, where a protected method named customCss can be invoked by unauthenticated...

Exploit for CVE-2025-48932

CVE-2025-48932-Invision-Community-SQLi-Exploit CVE-2025-48932...

The vulnerability in the `makeProcessFunction()` function of the `/applications/core/modules/front/system/themeeditor.php` file of the Invision Community (formerly IPS Community Suite) software allows a malicious user to execute arbitrary PHP code.

The vulnerability of the makeProcessFunction function in the /applications/core/modules/front/system/themeeditor.php file of the Invision Community formerly IPS Community Suite software for managing web forums involves a lack of measures to eliminate special elements in the template creation...

📄 Invision Community 5.0.6 customCss Expression Injection

Invision Community version 5.0.6 customCss expression injection proof of concept exploit written in PHP. ============================================================================================================================================= | Title : Invision Community 5.0.6 customCss...

Exploit for Improper Neutralization of Special Elements Used in a Template Engine in Invisioncommunity

CVE-2025-47916 - Invision Community Remote Code Execution RCE...

EUVD-2020-21845

Malware in sbrugna...

EUVD-2006-2252

Malware in sbrugna...

EUVD-2006-6352

Malware in sbrugna...

EUVD-2021-26379

Malware in sbrugna...

EUVD-2021-26378

Malware in sbrugna...

EUVD-2021-19645

Malware in sbrugna...

EUVD-2005-0218

Malware in sbrugna...

EUVD-2021-25612

Malware in sbrugna...

EUVD-2021-25611

Malware in sbrugna...

Invision Community 安全漏洞

Invision Community is a software for designing and developing mobile application UI from Invision USA. A security vulnerability exists in Invision Community versions 4.7.20 and earlier, which stems from improper input cleanup and is susceptible to SQL injection attacks...

Invision Community 4.7.20 - (calendar/view.php) SQL Injection

Exploit Title: Invision Community = 4.7.18. Proof of Concept https://karmainsecurity.com/pocs/CVE-2025-48932.php Solution Upgrade to v...