CVE-2021-26600

ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass != instead of !==...

CVE-2021-26600: Access of Resource Using Incompatible Type

ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass != instead of !==...

PT-2022-9762

Name of the Vulnerable Software and Affected Versions ImpressCMS versions prior to 1.4.3 Description The issue is related to a type confusion in the autologin.php file within the plugins/preloads directory, leading to an Authentication Bypass. This occurs due to the use of the != operator instead...

ImpressCMS 1.4.2 Authentication Bypass Vulnerability

----------------------------------------------------------------------- ImpressCMS stripSlashesGPC$autologinName; 46. $pass = $myts-stripSlashesGPC$autologinPass; 47. if empty$uname || isnumeric$pass 48. $user = false ; 49. else 50. // V3 51. $uname4sql = addslashes$uname; 52. $criteria = new...