Unscored CVE-2010-4897 EUVD-2010-4861GHSA-w7jq-m96j-xq9g

SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For…

Published Oct 8, 2011 · Updated Sep 16, 2024 · Assigned by mitre

Description

SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header in a send action.

References

67822 vdb-entry
41255 third-party-advisory
http://bbs.wolvez.org/viewtopic.php?id=148