SQL Injection Vulnerability in ImpressCMS by ImpressCMS
CVE-2010-4271

Currently unrated

Key Information:

Vendor

Impresscms

Status
Impresscms
Vendor
CVE Published:
17 November 2010

What is CVE-2010-4271?

A vulnerability exists in ImpressCMS that enables remote attackers to execute arbitrary SQL commands through unspecified vectors. This SQL injection flaw can lead to unauthorized access and manipulation of the database, compromising the integrity and confidentiality of user data. It is crucial for users of affected versions to upgrade to at least 1.2.3 RC2 to safeguard their application from potential malicious activities.

References

http://secunia.com/advisories/42160
third-party-advisoryx_refsource_SECUNIA
http://osvdb.org/69082
vdb-entryx_refsource_OSVDB
http://www.impresscms.org/content.php?page=ImpressCMS_1.2.3
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.