Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2008-6027

Multiple cross-site scripting (XSS) vulnerabilities in index.php in BLUEPAGE CMS 2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) whl, (2) var_1, and (3) search parameters.

CVSS 2.0 · 4.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Iss-oberlausitz
Products
Bluepage Cms
CVE-2008-6039

Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

CVSS 2.0 · 6.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Iss-oberlausitz
Products
Bluepage Cms
CVE-2022-38922

BluePage CMS thru 3.9 processes an insufficiently sanitized HTTP Header Cookie value allowing MySQL Injection in the 'users-cookie-settings' token using a Time-based blind SLEEP payload.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Iss-oberlausitz
Products
Bluepage Cms
CVE-2022-38923

BluePage CMS thru v3.9 processes an insufficiently sanitized HTTP Header allowing MySQL Injection in the 'User-Agent' field using a Time-based blind SLEEP payload.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Iss-oberlausitz
Products
Bluepage Cms