EUVD-2011-4842

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Eval injection vulnerability in ImpressPages CMS allows remote code execution through cm_group parameter

Reporter	Title	Published	Views	Family All 10
CVE	CVE-2011-4932	6 Oct 201221:00	–	cve
Cvelist	CVE-2011-4932	6 Oct 201221:00	–	cvelist
Github Security Blog	ImpressPages CMS eval injection vulnerability	17 May 202205:20	–	github
Tenable Nessus	ImpressPages cm_group Parameter Remote PHP Code Execution	19 Feb 201300:00	–	nessus
NVD	CVE-2011-4932	6 Oct 201221:55	–	nvd
OpenVAS	ImpressPages CMS 'actions.php' Remote Code Execution Vulnerability	6 Jan 201200:00	–	openvas
OpenVAS	ImpressPages CMS 'actions.php' RCE Vulnerability	6 Jan 201200:00	–	openvas
OSV	GHSA-FR34-MX6J-VPXH ImpressPages CMS eval injection vulnerability	17 May 202205:20	–	osv
Prion	Design/Logic Flaw	6 Oct 201221:55	–	prion
RedhatCVE	CVE-2011-4932	22 May 202503:28	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "296fde96-fe7d-3be3-9eb1-e286f11dc217",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "c3ddc0b8-c48b-3e7b-9b3e-84ddc811f6c7",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
secunia	www.secunia.com/advisories/46193
impresspages	www.impresspages.org/news/impresspages-1-0-13-security-release/
osvdb	www.osvdb.org/75783
openwall	www.openwall.com/lists/oss-security/2012/01/18/12
securityfocus	www.securityfocus.com/bid/49798
archives	www.archives.neohapsis.com/archives/bugtraq/2012-01/0029.html
openwall	www.openwall.com/lists/oss-security/2012/01/15/9
seclists	www.seclists.org/bugtraq/2011/Sep/156
nvd	www.nvd.nist.gov/vuln/detail/CVE-2011-4932
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

6.2Medium risk

Vulners AI Score6.2

CVSS 27.5

EPSS0.03472