未評価
ImpressCMS 1.3.11 contains a time-based blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by inject...
CVE-2019-25703
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
ImpressCMS 1.3.11 contains a time-based blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'bid' parameter. Attackers can send POST requests to the admin.php endpoint with malicious 'bid' values containing SQL commands to extract sensitive database information.
参照URL
- advisory vulncheck.com
- report exploit-db.com
- web impresscms.org
- web sourceforge.net