PT-2020-7149 · Unknown · Impresspages Cms

Henri Salo · Published 2020-01-22 · Updated 2022-04-22 · CVE-2011-4943

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ImpressPages CMS versions prior to 1.0.13

Description The issue concerns an unspecified remote code execution in ImpressPages CMS. The estimated number of potentially affected devices is not provided. There is no information about real-world incidents where this issue was exploited. Technical details about exploitation are not specified.

Recommendations For versions prior to 1.0.13, update to version 1.0.13 to resolve the issue.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2011-4943

GHSA-4XF9-4R44-86RC

Affected Products

Impresspages Cms

References · 6

• https://osv.dev/vulnerability/GHSA-4xf9-4r44-86rc · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-4943 · Security Note
• https://github.com/impresspages/ImpressPages/commit/a3a49241c3708903d75b28c2cc975d77245cf0cf · Note
• https://github.com/impresspages/ImpressPages · Note
• https://t.me/cibsecurity/9343 · Telegram Post
• http://openwall.com/lists/oss-security/2012/03/23/16 · Note