CVE-2021-26599

ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection...

CVE-2021-26598

ImpressCMS before 1.4.3 has Incorrect Access Control because include/findusers.php allows access by unauthenticated attackers who are, by design, able to have a security token...

CVE-2021-26598: Improper Authentication

ImpressCMS before 1.4.3 has Incorrect Access Control because include/findusers.php allows access by unauthenticated attackers who are, by design, able to have a security token...

CVE-2021-26599: Improper Neutralization of Special Elements used in an SQL Command

ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection...

PT-2022-9760

Name of the Vulnerable Software and Affected Versions ImpressCMS versions prior to 1.4.3 Description The issue is related to Incorrect Access Control in ImpressCMS, specifically in the include/findusers.php file, which allows access by unauthenticated attackers who have a security token by design...