← Database

CVE-2022-38923

CRITICAL CVSS: 9.8 Published: 2023-04-03 Modified: 2026-06-17

Description

BluePage CMS thru v3.9 processes an insufficiently sanitized HTTP Header allowing MySQL Injection in the 'User-Agent' field using a Time-based blind SLEEP payload.

Affected Platforms

Iss-Oberlausitz Bluepage Cms

Weakness Type

CWE-89, CWE-89

References