Iss Oberlausitz

iss-oberlausitz

4 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-38923 1Iss Oberlausitz 1Bluepage Cms Jun 17, 2026 Apr 3, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 BluePage CMS thru v3.9 processes an insufficiently sanitized HTTP Header allowing MySQL Injection in the 'User-Agent' field using a Time-based blind SLEEP payload.
CVE-2022-38922 1Iss Oberlausitz 1Bluepage Cms Jun 17, 2026 Apr 3, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 BluePage CMS thru 3.9 processes an insufficiently sanitized HTTP Header Cookie value allowing MySQL Injection in the 'users-cookie-settings' token using a Time-based blind SLEEP payload.
CVE-2008-6039 2Bluepage Iss Oberlausitz 2Bluepage Cms Bluepage Cms Mar 23, 2026 Feb 3, 2009 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
CVE-2008-6027 2Bluepage Iss Oberlausitz 2Bluepage Cms Bluepage Cms Mar 23, 2026 Feb 3, 2009 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in index.php in BLUEPAGE CMS 2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) whl, (2) var_1, and (3) search parameters.