Skip to content
OpenAdvisories

Package · Packagist

impresscms/impresscms

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.2
    CVE-2022-26986 Public exploit

    SQL injection in ImpressCMS

    SQL Injection in ImpressCMS 1.4.3 and earlier allows remote attackers to inject into the code in unintended way, this allows an attacker to read and modify the sensitive information from the database used by the application. If misconfigured, an attacker can …

    impresscms/impresscms Packagist
  • Critical 9.8
    CVE-2021-26599 Public exploit Scanner template EPSS 21%

    SQL Injection in ImpressCMS

    ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection.

    impresscms/impresscms Packagist
  • Medium —
    CVE-2014-1836 Public exploit

    ImpressCMS Path Traversal to Arbitrary File Delete

    Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the image_path parameter in a cancel action.

    impresscms/impresscms Packagist