Impresscms CVEs & Vulnerabilities

1 CVEs affecting Impresscms products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

impresscms 1

CVE-2019-25703HIGH

ImpressCMS 1.3.11 contains a time-based blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'bid' parameter. Attackers can send POST requests to the admin.php endpoint with malicious 'bid' values containing SQL commands to extract sensitive database information.

12 Apr 2026

8.8

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database