Path Traversal in ImpressCMS

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2021-26601 · ADVISORY
• ImpressCMS/impresscms · WEB
• ImpressCMS/impresscms#915 · WEB
• hackerone.com/reports/1081878 · WEB
• ImpressCMS/impresscms · PACKAGE
• ImpressCMS/impresscms release v1.4.3 · WEB
• karmainsecurity.com/KIS-2022-02 · WEB
• packetstormsecurity.com/files/166402/ImpressCMS-1.4.2-Path-Traversal.html · WEB
• seclists.org/fulldisclosure/2022/Mar/44 · WEB

Lỗ hổng khác của impresscms/impresscms

• CVE-2023-37785TRUNG BÌNH 4.8A cross-site scripting (XSS) vulnerability in ImpressCMS v1.4.5 and before allows attackers to execute arbitrary web scripts or HTML via a c…
• CVE-2022-26986CAO 7.2SQL Injection in ImpressCMS 1.4.3 and earlier allows remote attackers to inject into the code in unintended way, this allows an attacker to …
• CVE-2021-26600NGHIÊM TRỌNG 9.8ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass (!= instead of !==).
• CVE-2021-26599NGHIÊM TRỌNG 9.8ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection.
• CVE-2021-26598TRUNG BÌNH 5.3ImpressCMS before 1.4.3 has Incorrect Access Control because include/findusers.php allows access by unauthenticated attackers (who are, by d…