Exploitation Summary
EIP tracks 2 public exploits for CVE-2025-48932. PoCs published by Egidio Romano, XploitGh0st.
AI-analyzed exploit summary The vulnerability is a SQL injection flaw in Invision Community's calendar module, specifically in the `location` parameter of the `view.php` script. It allows unauthenticated attackers to perform boolean-based SQL injection attacks, potentially leading to sensitive data exposure.
Description
Invision Community 4.7.20 - (calendar/view.php) SQL Injection
Exploits (2)
The vulnerability is a SQL injection flaw in Invision Community's calendar module, specifically in the `location` parameter of the `view.php` script. It allows unauthenticated attackers to perform boolean-based SQL injection attacks, potentially leading to sensitive data exposure.
This repository contains a functional Python exploit for CVE-2025-48932, targeting an SQL injection vulnerability in Invision Community software. The exploit includes automated CSRF token extraction, boolean-based blind SQL injection, and admin password reset capabilities.