CVE-2010-4897
NONE EPSS 61.6%
Published Oct 8, 201114y ago · Modified Jun 16, 20262w ago
Published Oct 8, 2011 14y ago
Last Modified Jun 16, 2026 2w ago
Description
SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header in a send action.
Threat Intelligence
EPSS Exploit Probability
61.6% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-89 SQL Injection Injection
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| bluecms_project | bluecms | 1.6 | any |
References 3
- bbs.wolvez.org http://bbs.wolvez.org/viewtopic.php?id=148
- osvdb.org http://osvdb.org/67822
- secunia.com http://secunia.com/advisories/41255
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.