CVE-2024-30163 PoC — Invision Community 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30163.yaml

Associated Vulnerability

Title:Invision Community 安全漏洞 (CVE-2024-30163)
Description:Invision Community是美国Invision公司的一个用于设计、开发移动应用UI的软件。 Invision Community 4.7.16之前版本存在安全漏洞，该漏洞源于应用程序未能正确地对请求参数进行清理，未经身份验证的攻击者可以利用这个漏洞执行盲SQL注入攻击。

Description

IPS Community Suite is vulnerable to unauthenticated SQL injection via the filter[] parameter in the /index.php?/store/ endpoint, allowing attackers to extract sensitive information from the database.

File Snapshot


 id: CVE-2024-30163

info:
  name: IPS Community Suite - Unauthenticated SQL Injection
  author: riti

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!