PT-2022-18162 · Unknown · Impresscms

Sarang Tumne + 1 · Published 2022-04-05 · Updated 2023-03-27 · CVE-2022-26986

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ImpressCMS versions 1.4.3 and earlier

Description The issue allows remote attackers to inject code in an unintended way, enabling them to read and modify sensitive information from the database used by the application. If the system is misconfigured, an attacker can upload a malicious web shell, potentially compromising the entire system.

Recommendations For ImpressCMS versions 1.4.3 and earlier, update to a version later than 1.4.3 to resolve the issue. As a temporary workaround, consider restricting access to sensitive database information and ensuring proper configuration to prevent malicious web shell uploads.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2022-26986

GHSA-F99R-JJGR-F373

Affected Products

Impresscms

References · 8

• 🔥 https://github.com/sartlabs/0days/blob/main/ImpressCMS1.4.3/Exploit.txt · Exploit
• 🔥 https://exploit-db.com/exploits/51056 · Exploit
• https://osv.dev/vulnerability/CVE-2022-26986 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26986 · Security Note
• https://osv.dev/vulnerability/GHSA-f99r-jjgr-f373 · Vendor Advisory
• https://github.com/ImpressCMS/impresscms · Note
• http://packetstormsecurity.com/files/171485/ImpressCMS-1.4.3-SQL-Injection.html · Note
• https://t.me/cibsecurity/40165 · Telegram Post