CVE-2021-3025

Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API (the sortDir parameter in a sortBy=popular action to the GETindex() method in applications/downloads/api/files.php).

• CWE-89

• http://packetstormsecurity.com/files/160830/IPS-Community-Suite-4.5.4-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://invisioncommunity.com/release-notes/Release Notes, Vendor Advisory
• http://packetstormsecurity.com/files/160830/IPS-Community-Suite-4.5.4-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://invisioncommunity.com/release-notes/Release Notes, Vendor Advisory

Published

Jan 8, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30232The api/ZRIGMP/set_IGMP_PROXY interface in China Mobile An L…9.8
• CVE-2021-30233The api/ZRIptv/setIptvInfo interface in China Mobile An Lian…9.8
• CVE-2021-30234The api/ZRIGMP/set_MLD_PROXY interface in China Mobile An Li…9.8
• CVE-2021-3024HashiCorp Vault and Vault Enterprise disclosed the internal …5.3
• CVE-2021-30245The project received a report that all versions of Apache Op…8.8
• CVE-2021-30246In the jsrsasign package through 10.1.13 for Node.js, some i…9.1
• CVE-2021-30254Possible buffer overflow due to improper input validation in…7.8
• CVE-2021-30255Possible buffer overflow due to improper input validation in…7.8
• CVE-2021-30256Possible stack overflow due to improper validation of camera…7.8
• CVE-2021-30257Possible out of bound read or write in VR service due to lac…7.8
• CVE-2021-30258Possible buffer overflow due to improper size calculation of…7.8
• CVE-2021-30259Possible out of bound access due to improper validation of f…7.8