Archive
13 February 2022
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Critical 9.8
Path Traversal in ImpressCMS
ImpressCMS before 1.4.2 allows unauthenticated remote code execution via ...../// directory traversal in origName or imageName, leading to unsafe interaction with the CKEditor processImage.php script. The payload may be placed in PHP_SESSION_UPLOAD_PROGRESS w…