cve/2021/CVE-2021-26599.md

CVE-2021-26599

Description

ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection.

POC

Reference

• http://packetstormsecurity.com/files/166404/ImpressCMS-1.4.2-SQL-Injection.html

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cvemon
• https://github.com/cyb3r-w0lf/nuclei-template-collection