CVE-2022-38923

概要

参考情報

• dtssec/CVE-Disclosures · Exploit
• bluepage-cms.com/index.php · Product
• iss-oberlausitz.de/index.php · Vendor Advisory

bluepage cms のその他の脆弱性

• CVE-2022-38922緊急 9.8BluePage CMS thru 3.9 processes an insufficiently sanitized HTTP Header Cookie value allowing MySQL Injection in the 'users-cookie-settings'…
• CVE-2008-6039中 6.8Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID param…
• CVE-2008-6027中 4.3Multiple cross-site scripting (XSS) vulnerabilities in index.php in BLUEPAGE CMS 2.5 and earlier allow remote attackers to inject arbitrary …