← All advisories

Critical severityNVD Advisory· Published Mar 28, 2022· Updated Aug 3, 2024

CVE-2021-26599

CVE-2021-26599

Description

ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
impresscms/impresscmsPackagist	< 1.4.3	1.4.3

Affected products

2

Impresscms/Impresscmscpe-rescue
ghsa-coords
pkg:composer/impresscms/impresscms
Range: < 1.4.3

Patches

Vulnerability mechanics

References

7

github.com/advisories/GHSA-jc4v-vvg6-xg78ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2021-26599ghsaADVISORY
karmainsecurity.com/KIS-2022-04ghsax_refsource_MISCWEB
packetstormsecurity.com/files/166404/ImpressCMS-1.4.2-SQL-Injection.htmlghsax_refsource_MISCWEB
seclists.org/fulldisclosure/2022/Mar/46ghsax_refsource_MISCWEB
github.com/ImpressCMS/impresscms/releases/tag/v1.4.3ghsaWEB
hackerone.com/reports/1081145ghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.