CVE-2010-4897

2011-10-0810:00:00

mitre

www.cve.org

sql injection

bluecms

http header

AI Score

8.3

Confidence

Low

EPSS

0.001

Percentile

48.5%

JSON

SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header in a send action.

References

bbs.wolvez.org/viewtopic.php?id=148

osvdb.org/67822

secunia.com/advisories/41255