Sql injection

2019-02-0719:29:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.6%

JSON

Bo-blog Wind through 1.6.0-r allows SQL Injection via the admin.php/comments/batchdel/ comID parameter because this parameter is mishandled in the mode/admin.mode.php delBlockedBatch function.

CPENameOperatorVersion
bweq<= 1.6.0-r

CPE	Name	Operator	Version
	bw	eq	<= 1.6.0-r

References

c3tsec.wordpress.com/2019/01/12/sql-injection-in-bo-blog-wind-cms/