CVE-2021-3018

CRITICAL 9.8CVE-2021-3018 · Published 05/01/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
ipeakcms ipeak	`= 3.5`	No fix yet

Description

ipeak Infosystems ibexwebCMS (aka IPeakCMS) 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the id parameter on the /cms/print.php page.

References

packetstormsecurity.com/files/160815/IPeakCMS-3.5-SQL-Injection.html · Exploit
M4DM0e/m4dm0e.github.io · Third Party Advisory
ipeak.ch · Vendor Advisory
m4dm0e.github.io/2020/12/07/ipeak-cms-sqli.html · Exploit
amario.ch/cms · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free