What is GHSA-fr34-mx6j-vpxh?

GHSA-fr34-mx6j-vpxh is a security advisory published by GitHub Security Advisories with High severity. ImpressPages CMS eval injection vulnerability

Which CVE IDs does GHSA-fr34-mx6j-vpxh cover?

GHSA-fr34-mx6j-vpxh covers the following CVE IDs: CVE-2011-4932. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-fr34-mx6j-vpxh?

GHSA-fr34-mx6j-vpxh affects 1 product, including: composer/impresspages/impresspages:\u003c 1.0.13.

GHSA-fr34-mx6j-vpxhHigh

ImpressPages CMS eval injection vulnerability

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

April 12, 2025

🔗 CVE IDs covered (1)

CVE-2011-4932 →

📋 Description

Eval injection vulnerability in ip_cms/modules/standard/content_management/actions.php in ImpressPages CMS 1.0.12 and possibly other versons before 1.0.13 allows remote attackers to execute arbitrary code via the cm_group parameter.

🎯 Affected products1

composer/impresspages/impresspages:< 1.0.13

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2011-4932
http://seclists.org/bugtraq/2011/Sep/156
http://www.openwall.com/lists/oss-security/2012/01/15/9
http://www.openwall.com/lists/oss-security/2012/01/18/12
https://web.archive.org/web/20120726055617/http://www.securityfocus.com/bid/49798
https://web.archive.org/web/20120726081336/http://www.impresspages.org/news/impresspages-1-0-13-security-release
https://github.com/advisories/GHSA-fr34-mx6j-vpxh