Description
ImpressPages CMS 1.0.12版本和其他的1.0.13之前版本中的ip_cms/modules/standard/content_management/actions.php中存在Eval注入漏洞。远程攻击者可利用该漏洞通过cm_group参数，执行任意代码。
ImpressPages CMS未明远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.exploit-db.com/exploits/29331
https://www.nccgroup.com/research/remote-code-execution-in-impresspages-cms/
http://vulert.com/vuln-db/CVE-2011-4943
https://pentest-tools.com/vulnerabilities-exploits/impresspages-cms-actionsphp-remote-code-execution-vulnerability_8717
https://seclists.org/oss-sec/2012/q1/731
https://www.zeroscience.mk/advisories/ZSL-2013-5159.html
https://github.com/advisories/GHSA-4xf9-4r44-86rc
https://access.redhat.com/security/cve/cve-2011-4943
https://www.tenable.com/plugins/nessus/64686