Exploitation Summary
EIP tracks 3 public exploits for CVE-2025-48932. PoCs published by Egidio Romano, XploitGh0st, CerberusMrXi.
AI-analyzed exploit summary The vulnerability is a SQL injection flaw in Invision Community's calendar module, specifically in the `location` parameter of the `view.php` script. It allows unauthenticated attackers to perform boolean-based SQL injection attacks, potentially leading to sensitive data exposure.
Description
Invision Community 4.7.20 - (calendar/view.php) SQL Injection
Exploits (3)
The vulnerability is a SQL injection flaw in Invision Community's calendar module, specifically in the `location` parameter of the `view.php` script. It allows unauthenticated attackers to perform boolean-based SQL injection attacks, potentially leading to sensitive data exposure.
This repository contains a functional Python exploit for CVE-2025-48932, targeting an SQL injection vulnerability in Invision Community software. The exploit includes automated CSRF token extraction, boolean-based blind SQL injection, and admin password reset capabilities.
This repository contains a functional Python exploit for CVE-2025-48932, an unauthenticated SQL injection vulnerability in Invision Community <= 4.7.20. The exploit includes boolean-based and time-based injection techniques, multi-threaded data extraction, and database enumeration capabilities.