CVE-2025-48932

The vulnerability is a SQL injection flaw in Invision Community's calendar module, specifically in the `location` parameter of the `view.php` script. It allows unauthenticated attackers to perform boolean-based SQL injection attacks, potentially leading to sensitive data exposure.

This repository contains a functional Python exploit for CVE-2025-48932, targeting an SQL injection vulnerability in Invision Community software. The exploit includes automated CSRF token extraction, boolean-based blind SQL injection, and admin password reset capabilities.