Back to CVE Browser

CVE-2008-3453

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0500%

EPSS Percentile38.77th

PublishedAug 4, 2008

Last ModifiedApr 23, 2026

Vulnerability Description

Multiple unspecified vulnerabilities in ImpressCMS 1.0 have unknown impact and attack vectors, related to modules/admin.php and "a few files."

Affected Platforms (CPE)

📦

Impresscms

Impresscms

= 1.0

References & Advisories

🔗 http://secunia.com/advisories/31259

🔗 http://sourceforge.net/project/shownotes.php?release_id=616122

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/44122

🔗 http://secunia.com/advisories/31259

🔗 http://sourceforge.net/project/shownotes.php?release_id=616122

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/44122

Related Vulnerabilities

CVE-2021-266009.8

ImpressCMS before 1.4.3 has plugins/preloads/autologin.php type confusion with resultant Authentication Bypass (!= instead of !==)...

CVE-2021-265999.8

ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection.

CVE-2021-479388.8

ImpressCMS 1.4.2 contains a remote code execution vulnerability in the autotasks administrative interface that allows authenticate...

CVE-2021-266018.1

ImpressCMS before 1.4.3 allows libraries/image-editor/image-edit.php image_temp Directory Traversal.