ImpressCMS 1.3.10 Cross Site Scripting

Multiple Cross-site Scripting Vulnerabilities in ImpressCMS 1.3.10 Information -------------------- Advisory by Netsparker Name: Reflected and Stored XSS Vulnerabilities in ImpressCMS Affected Software: ImpressCMS Affected Versions: 1.3.10 Homepage: https://www.impresscms.org/ Vulnerability:...

ImpressCMS 1.3.9 - SQL Injection

No description provided by source...

ImpressCMS 1.3.9 - SQL Injection

ImpressCMS 1.3.9 - SQL Injection ============================================= MGC ALERT 2016-002 - Original release date: April 8, 2016 - Last revised: April 21, 2016 - Discovered by: Manuel García Cárdenas - Severity: 7,1/10 CVSS Base Score ============================================= I...

ImpressCMS 1.3.9 - SQL Injection

============================================= MGC ALERT 2016-002 - Original release date: April 8, 2016 - Last revised: April 21, 2016 - Discovered by: Manuel García Cárdenas - Severity: 7,1/10 CVSS Base Score ============================================= I. VULNERABILITY ------------------------...

ImpressCMS 1.3.9 - SQL Injection

Exploit for php platform in category web applications ============================================= MGC ALERT 2016-002 - Original release date: April 8, 2016 - Last revised: April 21, 2016 - Discovered by: Manuel García Cárdenas - Severity: 7,1/10 CVSS Base Score...

ImpressCMS 1.3.9 SQL Injection

============================================= MGC ALERT 2016-002 - Original release date: April 8, 2016 - Last revised: April 21, 2016 - Discovered by: Manuel García Cárdenas - Severity: 7,1/10 CVSS Base Score ============================================= I. VULNERABILITY ------------------------...

CVE-2014-1836

Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the imagepath parameter in a cancel action...

Path traversal

Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the imagepath parameter in a cancel action...

CVE-2014-1836

ImpressCMS 1.3.5 and earlier contain an absolute path traversal in htdocs/libraries/image-editor/image-edit.php via the image_path parameter in a cancel action, enabling remote attackers to delete arbitrary files. This is associated with CVE-2014-1836 and is documented in multiple advisories (GHS...

CVE-2014-1836

Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the imagepath parameter in a cancel action...

ImpressCMS 1.3.5 - Multiple Vulnerabilities

No description provided by source. I have discovered two vulnerabilities in ImpressCMS. These have been fixed in the new 1.3.6 version, which you can get at https://sourceforge.net/projects/impresscms/files/ImpressCMS%20Official%20Releases/ImpressCMS%201.3%20Branch/ImpressCMS%201.3.6/. One is an...

CVE-2014-4036

Cross-site scripting XSS vulnerability in modules/system/admin.php in ImpressCMS 1.3.6.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a listimg action...

Cross site scripting

Cross-site scripting XSS vulnerability in modules/system/admin.php in ImpressCMS 1.3.6.1 allows remote attackers to inject arbitrary web script or HTML via the query parameter in a listimg action...

CVE-2014-4036

CVE-2014-4036 is an XSS vulnerability affecting ImpressCMS 1.3.6.1, specifically in modules/system/admin.php where a listimg action’s query parameter can inject arbitrary script/HTML. The vulnerability is confirmed across multiple connected records (Red Hat, NVD, GHSA, osv, CVE record). No concre...

undefinedImpressCMS 1.3.6.1 Cross Site Scriptingundefined

Exploit Title: ImpressCMS 1.3.6.1 Reflected XSS Date: 05/28/2014 Author: Mustafa ALTINKAYNAK Download URL : http://www.impresscms.org Software Link: http://www.impresscms.org/content.php?page=Download Vuln Category: CWE-79 XSS Tested on: ImpressCMS 1.3.6.1 Tested Local Platform : XAMP on Windows ...

ImpressCMS 1.3.5 - Multiple Vulnerabilities

ImpressCMS 1.3.5 - Multiple Vulnerabilities I have discovered two vulnerabilities in ImpressCMS. These have been fixed in the new 1.3.6 version, which you can get at https://sourceforge.net/projects/impresscms/files/ImpressCMS%20Official%20Releases/ImpressCMS%201.3%20Branch/ImpressCMS%201.3.6/. O...

ImpressCMS 1.3.5 - Multiple Vulnerabilities

Exploit for php platform in category web applications I have discovered two vulnerabilities in ImpressCMS. These have been fixed in the new 1.3.6 version, which you can get at...

ImpressCMS 1.3.5 - Multiple Vulnerabilities

I have discovered two vulnerabilities in ImpressCMS. These have been fixed in the new 1.3.6 version, which you can get at https://sourceforge.net/projects/impresscms/files/ImpressCMS%20Official%20Releases/ImpressCMS%201.3%20Branch/ImpressCMS%201.3.6/. One is an arbitrary file deletion and the oth...

ImpressCMS 1.3.5 XSS / File Deletion

Hi, I have discovered two vulnerabilities in ImpressCMS. These have been fixed in the new 1.3.6 version, which you can get at https://sourceforge.net/projects/impresscms/files/ImpressCMS%20Official%20Releases/ImpressCMS%201.3%20Branch/ImpressCMS%201.3.6/. One is an arbitrary file deletion and the...

CVE-2012-0986

Multiple cross-site scripting XSS vulnerabilities in ImpressCMS 1.2.x before 1.2.7 Final and 1.3.x before 1.3.1 Final allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 notifications.php, 2 modules/system/admin/images/browser.php, and 3...