Severity: Critical
CVSS Score: 9.8
ImpressCMS before 1.4.3 allows include/findusers.php groups SQL Injection.