ImpressCMS: from unauthenticated SQL injection to RCE

Read Time:15 Second

Posted by Egidio Romano on Mar 23

Hello list,

I’d like to share with you my latest blog post. Hope you may find this
SQL injection exploitation technique interesting and potentially useful
for your penetration tests. Enjoy it!

Link: http://karmainsecurity.com/impresscms-from-unauthenticated-sqli-to-rce

Best regards,
/EgiX

openjpeg2-2.5.3-1.fc40

FEDORA-2024-272544ceb9 Packages in this update: openjpeg2-2.5.3-1.fc40 Update description: Update to openjpeg-2.5.3 Fix 2 heap-buffer-overflow Read More

December 24, 2024

libxml2-2.12.9-1.fc40

FEDORA-2024-9f3765a04b Packages in this update: libxml2-2.12.9-1.fc40 Update description: Update to 2.12.9 Fixes CVE-2024-40896 Read More

December 24, 2024

libxml2-2.12.9-1.fc41

FEDORA-2024-867a14de12 Packages in this update: libxml2-2.12.9-1.fc41 Update description: Update to 2.12.9 Fixes CVE-2024-40896. Read More

December 24, 2024

iwd-3.3-1.fc40 libell-0.71-1.fc40

FEDORA-2024-0fa283c43a Packages in this update: iwd-3.3-1.fc40 libell-0.71-1.fc40 Update description: iwd 3.3: Fix issue with handling External Authentication. iwd 3.2: Fix...

December 24, 2024

iwd-3.3-1.fc41 libell-0.71-1.fc41

FEDORA-2024-256818da09 Packages in this update: iwd-3.3-1.fc41 libell-0.71-1.fc41 Update description: iwd 3.3: Fix issue with handling External Authentication. iwd 3.2: Fix...

December 24, 2024

A Vulnerability in Apache Struts2 Could Allow for Remote Code Execution

A vulnerability has been discovered in Apache Struts2, which could allow for remote code execution. Apache Struts2 is an open-source...

December 23, 2024

The AI Fix #30: ChatGPT reveals the devastating truth about Santa (Merry Christmas!)

US and Japan Blame North Korea for $308m Crypto Heist

Spyware Maker NSO Group Found Liable for Hacking WhatsApp

Spyware Maker NSO Group Liable for WhatsApp User Hacks

Major Biometric Data Farming Operation Uncovered

Ransomware Attack Exposes Data of 5.6 Million Ascension Patients

Critical Vulnerabilities Found in WordPress Plugins WPLMS and VibeBP

Criminal Complaint against LockBit Ransomware Writer

Cryptomining Malware Found in Popular Open Source Packages

ImpressCMS: from unauthenticated SQL injection to RCE

openjpeg2-2.5.3-1.fc40

libxml2-2.12.9-1.fc40

libxml2-2.12.9-1.fc41

iwd-3.3-1.fc40 libell-0.71-1.fc40

iwd-3.3-1.fc41 libell-0.71-1.fc41

A Vulnerability in Apache Struts2 Could Allow for Remote Code Execution