ipeak Infosystems ibexwebCMS (aka IPeakCMS) 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the id parameter on the /cms/print.php page.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/160815/IPeakCMS-3.5-SQL-Injection.html | Exploit Third Party Advisory VDB Entry |
| https://github.com/M4DM0e/m4dm0e.github.io/blob/gh-pages/_posts/2020-12-07-ipeak-cms-sqli.md | Third Party Advisory |
| https://ipeak.ch | Vendor Advisory |
| https://m4dm0e.github.io/2020/12/07/ipeak-cms-sqli.html | Exploit Third Party Advisory |
| https://www.amario.ch/cms/ | Permissions Required |
| http://packetstormsecurity.com/files/160815/IPeakCMS-3.5-SQL-Injection.html | Exploit Third Party Advisory VDB Entry |
| https://github.com/M4DM0e/m4dm0e.github.io/blob/gh-pages/_posts/2020-12-07-ipeak-cms-sqli.md | Third Party Advisory |
| https://ipeak.ch | Vendor Advisory |
| https://m4dm0e.github.io/2020/12/07/ipeak-cms-sqli.html | Exploit Third Party Advisory |
| https://www.amario.ch/cms/ | Permissions Required |
Configurations
History
21 Nov 2024, 06:20
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/160815/IPeakCMS-3.5-SQL-Injection.html - Exploit, Third Party Advisory, VDB Entry | |
| References | () https://github.com/M4DM0e/m4dm0e.github.io/blob/gh-pages/_posts/2020-12-07-ipeak-cms-sqli.md - Third Party Advisory | |
| References | () https://ipeak.ch - Vendor Advisory | |
| References | () https://m4dm0e.github.io/2020/12/07/ipeak-cms-sqli.html - Exploit, Third Party Advisory | |
| References | () https://www.amario.ch/cms/ - Permissions Required |
Information
Published : 2021-01-05 05:15
Updated : 2024-11-21 06:20
NVD link : CVE-2021-3018
Mitre link : CVE-2021-3018
CVE.ORG link : CVE-2021-3018
JSON object : View
Products Affected
ipeak
- ipeakcms
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')