← Database

CVE-2022-38922

CRITICAL CVSS: 9.8 Published: 2023-04-03 Modified: 2026-06-17

Description

BluePage CMS thru 3.9 processes an insufficiently sanitized HTTP Header Cookie value allowing MySQL Injection in the 'users-cookie-settings' token using a Time-based blind SLEEP payload.

Affected Platforms

Iss-Oberlausitz Bluepage Cms

Weakness Type

CWE-89, CWE-89

References