EUVD-2021-26371

Malware in sbrugna...

CVE-2021-3018: Improper Neutralization of Special Elements used in an SQL Command

ipeak Infosystems ibexwebCMS aka IPeakCMS 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the id parameter on the /cms/print.php page...

PT-2021-18654

Name of the Vulnerable Software and Affected Versions ipeak Infosystems ibexwebCMS aka IPeakCMS version 3.5 Description The issue is related to an unauthenticated Boolean-based SQL injection. This occurs via the id parameter on the "/cms/print.php" page. Recommendations For version 3.5, consider...