| Package | Affected versions | Patched versions |
|---|---|---|
| impresscms | = 1.4.4 |
ImpressCMS 1.4.4 contains a file upload vulnerability with weak extension sanitization that allows attackers to upload potentially malicious files. Attackers can bypass file upload restrictions by using alternative file extensions .php2.php6.php7.phps.pht to execute arbitrary PHP code on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free