CVE-2019-25703
HIGH
NVD
CVSS Score
7.1
Severity
HIGH
Published
Apr 12, 2026
Vendor
unknown
Description
ImpressCMS 1.3.11 contains a time-based blind SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'bid' parameter. Attackers can send POST requests to the admin.php endpoint with malicious 'bid' values containing SQL commands to extract sensitive database information.