Description
Invision Community存在SQL注入漏洞，此漏洞是由于store.php接口对用户的请求验证不当导致的。
Invision Community CVE-2024-30163 SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-30163
https://github.com/advisories/GHSA-8cjv-25v5-q73j
https://cve.imfht.com/detail/CVE-2024-30163
https://ssd-disclosure.com/ssd-advisory-ip-board-nexus-rce-and-blind-sqli/
https://vulners.com/packetstorm/PACKETSTORM:177982
https://osv.dev/vulnerability/CVE-2024-30163
https://pentest-tools.com/vulnerabilities-exploits/ips-community-suite-unauthenticated-sql-injection_27178
https://karmainsecurity.com/KIS-2024-02