Skip to content
OpenAdvisories

Package · Packagist

impresscms/impresscms

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2022-26986 Public exploit

    SQL injection in ImpressCMS

    SQL Injection in ImpressCMS 1.4.3 and earlier allows remote attackers to inject into the code in unintended way, this allows an attacker to read and modify the sensitive information from the database used by the application. If misconfigured, an attacker can …

    impresscms/impresscms Packagist
  • High 8.1
    CVE-2021-26601

    Path Traversal in ImpressCMS

    ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php image_temp Directory Traversal.

    impresscms/impresscms Packagist