Skip to content
OpenAdvisories

Package · Packagist

impresscms/impresscms

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2021-26600

    Type Confusion in ImpressCMS

    ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass (!= instead of !==).

    impresscms/impresscms Packagist
  • Critical 9.8
    CVE-2021-26599 Public exploit Scanner template EPSS 21%

    SQL Injection in ImpressCMS

    ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection.

    impresscms/impresscms Packagist
  • Critical 9.8
    CVE-2022-24977

    Path Traversal in ImpressCMS

    ImpressCMS before 1.4.2 allows unauthenticated remote code execution via ...../// directory traversal in origName or imageName, leading to unsafe interaction with the CKEditor processImage.php script. The payload may be placed in PHP_SESSION_UPLOAD_PROGRESS w…

    impresscms/impresscms Packagist