CVE-2019-7587

2022-10-0316:19:29

mitre

www.cve.org

bo-blog wind

sql injection

comid parameter

9.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.6%

JSON

Bo-blog Wind through 1.6.0-r allows SQL Injection via the admin.php/comments/batchdel/ comID parameter because this parameter is mishandled in the mode/admin.mode.php delBlockedBatch function.

References

c3tsec.wordpress.com/2019/01/12/sql-injection-in-bo-blog-wind-cms/