What’s Vulnerable › Vulnerabilities

CVE-2021-3018

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 18.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-01-05 · updated 2026-06-17
• Weakness: CWE-89

Description

ipeak Infosystems ibexwebCMS (aka IPeakCMS) 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the id parameter on the /cms/print.php page.

Affected products

• Ipeakcms: 3.5

References

• http://packetstormsecurity.com/files/160815/IPeakCMS-3.5-SQL-Injection.html
• https://github.com/M4DM0e/m4dm0e.github.io/blob/gh-pages/_posts/2020-12-07-ipeak-cms-sqli.md
• https://ipeak.ch
• https://m4dm0e.github.io/2020/12/07/ipeak-cms-sqli.html
• https://www.amario.ch/cms/
• http://packetstormsecurity.com/files/160815/IPeakCMS-3.5-SQL-Injection.html
• https://github.com/M4DM0e/m4dm0e.github.io/blob/gh-pages/_posts/2020-12-07-ipeak-cms-sqli.md
• https://ipeak.ch
• https://m4dm0e.github.io/2020/12/07/ipeak-cms-sqli.html
• https://www.amario.ch/cms/

Get alerted when CVE-2021-3018 or the next vulnerability affects your stack