oss-sec mailing list archives

CVE-request: NGS00109 remote code execution in ImpressPages CMS


From: Henri Salo <henri () nerv fi>
Date: Sun, 15 Jan 2012 17:58:06 +0200

This issue does not have CVE assigned. If I am correct this needs CVE from 2011 pool as original advisory was done in 
http://seclists.org/bugtraq/2011/Sep/156 but details came in http://seclists.org/bugtraq/2012/Jan/28

Vendor url: http://www.impresspages.org/news/impresspages-1-0-13-security-release/
Secunia: http://secunia.com/advisories/46193/
OSVDB: http://osvdb.org/show/osvdb/75783

eval() is evil()

- Henri Salo


Current thread: