Ips Community Suite
Approved changes feed: RSS · Atom
cpe:2.3:a:invisioncommunity:ips_community_suite:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Invisioncommunity (55f637a7-6efb-5a4c-a15a-add02ac294fa) |
|---|---|
| Product | Ips Community Suite (882690fd-e0c7-568a-b5f1-2379e2e12d1b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-40604 |
vulnerable | 2026-06-08 05:35:18.831384 |
Details available
A Server-Side Request Forgery (SSRF) vulnerability in IPS Community Suite before 4.6.2 allows remote authenticated users to request arbitrary URLs or trigger deserialization via phar protocol when generating class names dynamically. In some cases an exploitation is possible by an unauthenticated user.
Published: 2022-06-13T17:45:39.000Z
Updated: 2024-08-04T02:44:10.814Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3026 |
vulnerable | 2026-06-08 05:33:50.683726 |
Details available
Invision Community IPS Community Suite before 4.5.4.2 allows XSS during the quoting of a post or comment.
Published: 2021-01-05T22:58:06.000Z
Updated: 2024-08-03T16:45:50.887Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3025 |
vulnerable | 2026-06-08 05:33:50.683220 |
Details available
Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API (the sortDir parameter in a sortBy=popular action to the GETindex() method in applications/downloads/api/files.php).
Published: 2021-01-08T06:21:36.000Z
Updated: 2024-08-03T16:45:50.693Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32924 |
vulnerable | 2026-06-08 05:32:08.199914 |
Details available
Invision Community (aka IPS Community Suite) before 4.6.0 allows eval-based PHP code injection by a moderator because the IPS\cms\modules\front\pages\_builder::previewBlock method interacts unsafely with the IPS\_Theme::runProcessFunction method.
Published: 2021-06-01T17:47:42.000Z
Updated: 2024-08-03T23:33:56.038Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.