İçeriğe atla
Noroxi

Impresscms kayıtları

impresscms üreticisine ait 21 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
3
Düzeltme kaydı olan
%38,1
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 20
  3. 21
  4. 22
  5. 23
  6. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

21 kayıt
  • CVE-2021-26599
    45Planlayın

    ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection.

    KritikCVSS 9,8Kavram kanıtıEPSS %21

    impresscms · impresscms27 Mar 2022

  • CVE-2022-24977
    41Planlayın

    ImpressCMS before 1.4.2 allows unauthenticated remote code execution via ...../// directory traversal in origName or imageName, leading to u

    KritikCVSS 9,8İstismar yokEPSS %6

    impresscms · impresscms14 Şub 2022

  • CVE-2021-26600
    41Planlayın

    ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass (!= instead of !==).

    KritikCVSS 9,8İstismar yokEPSS %6

    impresscms · impresscms27 Mar 2022

  • CVE-2008-3453
    40Planlayın

    Multiple unspecified vulnerabilities in ImpressCMS 1.0 have unknown impact and attack vectors, related to modules/admin.php and "a few files

    KritikCVSS 10,0İstismar yokEPSS %1

    impresscms · impresscms4 Ağu 2008

  • CVE-2022-50912
    37İzleyin

    ImpressCMS 1.4.4 - Unrestricted File Upload

    KritikCVSS 9,3İstismar yokEPSS %1

    impresscms · impresscms13 Oca 2026

  • CVE-2021-26601
    33İzleyin

    ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php image_temp Directory Traversal.

    YüksekCVSS 8,1İstismar yokEPSS %3

    impresscms · impresscms27 Mar 2022

  • CVE-2010-4271
    30İzleyin

    SQL injection vulnerability in ImpressCMS before 1.2.3 RC2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors

    YüksekCVSS 7,5İstismar yokEPSS %1

    impresscms · impresscms16 Kas 2010

  • CVE-2022-26986
    29İzleyin

    SQL Injection in ImpressCMS 1.4.3 and earlier allows remote attackers to inject into the code in unintended way, this allows an attacker to

    YüksekCVSS 7,2Kavram kanıtıEPSS %4

    impresscms · impresscms5 Nis 2022

  • CVE-2019-25703
    28İzleyin

    ImpressCMS 1.3.11 SQL Injection via bid Parameter

    YüksekCVSS 7,1İstismar yokEPSS %0

    impresscms · impresscms12 Nis 2026

  • CVE-2008-5964
    27İzleyin

    Session fixation vulnerability in Social ImpressCMS before 1.1.1 RC1 allows remote attackers to hijack web sessions by setting the PHPSESSID

    OrtaCVSS 6,8İstismar yokEPSS %2

    impresscms · impresscms23 Oca 2009

  • CVE-2014-1836
    26İzleyin

    Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to

    OrtaCVSS 6,4Kavram kanıtıEPSS %4

    impresscms · impresscms1 Tem 2015

  • CVE-2021-26598
    24İzleyin

    ImpressCMS before 1.4.3 has Incorrect Access Control because include/findusers.php allows access by unauthenticated attackers (who are, by d

    OrtaCVSS 5,3Kavram kanıtıEPSS %11

    impresscms · impresscms27 Mar 2022

  • CVE-2018-13983
    24İzleyin

    ImpressCMS 1.3.10 has XSS via the PATH_INFO to htdocs/install/index.php, htdocs/install/page_langselect.php, or htdocs/install/page_modcheck

    OrtaCVSS 6,1İstismar yokEPSS %2

    impresscms · impresscms6 May 2019

  • CVE-2012-0987
    24İzleyin

    Directory traversal vulnerability in edituser.php in ImpressCMS 1.2.x before 1.2.7 Final and 1.3.x before 1.3.1 Final allows remote authenti

    OrtaCVSS 6,0İstismar yokEPSS %2

    impresscms · impresscms6 Eki 2012

  • CVE-2021-28088
    21İzleyin

    Cross-site scripting (XSS) in modules/content/admin/content.php in ImpressCMS profile 1.4.2 allows remote attackers to inject arbitrary web

    OrtaCVSS 5,4İstismar yokEPSS %1

    impresscms · impresscms11 Mar 2021

  • CVE-2020-17551
    19İzleyin

    ImpressCMS 1.4.0 is affected by XSS in modules/system/admin.php which may result in arbitrary remote code execution.

    OrtaCVSS 4,8İstismar yokEPSS %1

    impresscms · impresscms7 Eki 2020

  • CVE-2023-37785
    19İzleyin

    A cross-site scripting (XSS) vulnerability in ImpressCMS v1.4.5 and before allows attackers to execute arbitrary web scripts or HTML via a c

    OrtaCVSS 4,8İstismar yokEPSS %0

    impresscms · impresscms13 Tem 2023

  • CVE-2012-0986
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in ImpressCMS 1.2.x before 1.2.7 Final and 1.3.x before 1.3.1 Final allow remote attacke

    OrtaCVSS 4,3İstismar yokEPSS %2

    impresscms · impresscms6 Eki 2012

  • CVE-2010-4616
    17İzleyin

    Cross-site scripting (XSS) vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before

    OrtaCVSS 4,3İstismar yokEPSS %1

    impresscms · impresscms29 Ara 2010

  • CVE-2008-6360
    17İzleyin

    Cross-site scripting (XSS) vulnerability in the userranks feature in modules/system/admin.php in ImpressCMS 1.0.2 final allows remote attack

    OrtaCVSS 4,3İstismar yokEPSS %1

    impresscms · impresscms2 Mar 2009

  • CVE-2014-4036
    17İzleyin

    Cross-site scripting (XSS) vulnerability in modules/system/admin.php in ImpressCMS 1.3.6.1 allows remote attackers to inject arbitrary web s

    OrtaCVSS 4,3İstismar yokEPSS %1

    impresscms · impresscms11 Haz 2014