CVE-2019-25703

概要

参考情報

• impresscms.org · Product
• sourceforge.net/projects/impresscms/files/v1.3.11/impresscms_1.3.11.zip · Product
• exploit-db.com/exploits/46239 · Exploit
• vulncheck.com/advisories/impresscms-sql-injection-via-bid-parameter · Third Party Advisory

impresscms のその他の脆弱性

• CVE-2022-50912緊急 9.8ImpressCMS 1.4.4 contains a file upload vulnerability with weak extension sanitization that allows attackers to upload potentially malicious…
• CVE-2023-37785中 4.8A cross-site scripting (XSS) vulnerability in ImpressCMS v1.4.5 and before allows attackers to execute arbitrary web scripts or HTML via a c…
• CVE-2022-26986高 7.2SQL Injection in ImpressCMS 1.4.3 and earlier allows remote attackers to inject into the code in unintended way, this allows an attacker to …
• CVE-2021-26601高 8.1ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php image_temp Directory Traversal.
• CVE-2021-26600緊急 9.8ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass (!= instead of !==).