CVE-2010-4897

2022-10-0316:21:06

mitre

www.cve.org

sql injection

bluecms

http header

8.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.7%

JSON

SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header in a send action.

References

bbs.wolvez.org/viewtopic.php?id=148

osvdb.org/67822

secunia.com/advisories/41255