Back to search
CVE-2011-4932
Published: Oct 6, 2012
Modified: Sep 16, 2024
PUBLISHED
Description
Eval injection vulnerability in ip_cms/modules/standard/content_management/actions.php in ImpressPages CMS 1.0.12 and possibly other versons before 1.0.13 allows remote attackers to execute arbitrary code via the cm_group parameter.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
46193
third-party-advisory
x_refsource_SECUNIA
http://www.impresspages.org/news/impresspages-1-0-13-security-release/
x_refsource_CONFIRM
75783
vdb-entry
x_refsource_OSVDB
[oss-security] 20120118 Re: CVE-request: NGS00109 remote code execution in ImpressPages CMS
mailing-list
x_refsource_MLIST
49798
vdb-entry
x_refsource_BID
20120105 NGS00109 Technical Advisory: Remote Code Execution in ImpressPages CMS
mailing-list
x_refsource_BUGTRAQ
[oss-security] 20120115 CVE-request: NGS00109 remote code execution in ImpressPages CMS
mailing-list
x_refsource_MLIST
20110927 NGS00109 Patch Notification: ImpressPages CMS Remote code execution
mailing-list
x_refsource_BUGTRAQ
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now