PT-2021-18654
CVE-2021-3018
·
Published
2021-01-05
·
Updated
2025-10-15
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ipeak Infosystems ibexwebCMS (aka IPeakCMS) version 3.5
Description
The issue is related to an unauthenticated Boolean-based SQL injection. This occurs via the
id parameter on the "/cms/print.php" page.Recommendations
For version 3.5, consider restricting access to the "/cms/print.php" page until a fix is available. As a temporary workaround, avoid using the
id parameter in the affected page to minimize the risk of exploitation.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾