Skip to content
OpenAdvisories

Package · Packagist

impresscms/impresscms

13 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2014-1836 Public exploit

    ImpressCMS Path Traversal to Arbitrary File Delete

    Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the image_path parameter in a cancel action.

    impresscms/impresscms Packagist