ImpressCMS Time-Based Blind SQL Injection Vulnerability

A time-based blind SQL injection vulnerability has been identified in ImpressCMS version 1.3.11. This vulnerability allows authenticated attackers to manipulate database queries by injecting SQL code through the 'bid' parameter. Exploitation involves sending POST requests to the admin.php endpoint with crafted 'bid' values that include SQL commands, enabling attackers to extract sensitive information from the database.

Impact

Exploitation of this vulnerability allows for time-based blind SQL injection, where an attacker can manipulate SQL queries and potentially access or modify database information.

Reproduction

To reproduce this vulnerability, log into an application running ImpressCMS 1.3.11. Send a POST request to the admin.php endpoint with the 'bid' parameter set to a value that includes a SQL injection payload, such as one that uses a SQL injection technique to delay the response, indicating successful exploitation.