| Package | Affected versions | Patched versions |
|---|---|---|
| ips community suite | < 4.5.4.2 | 4.5.4.2 |
Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API (the sortDir parameter in a sortBy=popular action to the GETindex() method in applications/downloads/api/files.php).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free