CVE-2021-26599: SQL Injection in ImpressCMS
Summary
CVE-2021-26599: SQL Injection in ImpressCMS. Affects impresscms/impresscms versions < 1.4.3. Fixed in 1.4.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
ImpressCMS is an open-source content management system (CMS) that allows users to create and manage dynamic websites. It provides various features such as user management, content publishing, and template customization. ImpressCMS is written in PHP and uses a MySQL database for storing data. However, a vulnerability has been discovered in ImpressCMS versions before 1.4.3 that allows for SQL injection attacks.
Vulnerability Detail
The vulnerability (CVE-2021-26599) exists in the 'include/findusers.php' file of ImpressCMS. Attackers can exploit this vulnerability by injecting malicious SQL queries into the 'groups' parameter. This can lead to unauthorized access to the database and potential data leakage or manipulation. The vulnerability has a CVSS score of 9.8, indicating its critical severity.
How To Fix
Minimum fixed version
1.4.3
This is the first release that contains the fix.
composer require impresscms/impresscms:1.4.3Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The SQL injection vulnerability in ImpressCMS versions before 1.4.3 can lead to unauthorized access to the database and potential data leakage or manipulation. Users are advised to upgrade to the latest version of ImpressCMS (1.4.3 or later) to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for impresscms/impresscms →
FAQ
SQL injection is a type of security vulnerability that allows attackers to manipulate SQL queries executed by a web application. By injecting malicious SQL code, attackers can bypass authentication, access unauthorized data, modify database records, or even execute arbitrary commands.
The SQL injection vulnerability in ImpressCMS can be exploited by injecting malicious SQL queries into the 'groups' parameter of the 'include/findusers.php' file. Attackers can craft SQL statements that manipulate the database query and potentially gain unauthorized access to sensitive data.
The SQL injection vulnerability in ImpressCMS can lead to various consequences, including unauthorized access to sensitive data, data leakage, data manipulation, and potential compromise of the entire system. Attackers can extract confidential information, modify or delete data, or even execute arbitrary commands on the underlying database server.
Currently, there is no known workaround for this vulnerability. It is recommended to upgrade to ImpressCMS version 1.4.3 or later, which includes a patch to mitigate the SQL injection vulnerability.
You can use the Vulert Playground (https://vulert.com/scanner) to check if your ImpressCMS installation is affected by this vulnerability. Vulert analyzes the composer.lock file of your application and provides real-time alerts for open-source vulnerabilities, including CVE-2021-26599.
Related vulnerabilities
Recent vulnerabilities recorded for impresscms/impresscms.
