CVE-2009-0883 SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the BlueEyeCMS_login cookie parameter.
MediumCVSS 6.8
EPSS 0.93%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in Blue Eye CMS 1.0.0 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the BlueEyeCMS_login cookie parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| amunak blue eye cms | <= 1.0.0 | No fix listed |
| amunak blue eye cms | = 1.0.0-prerc | No fix listed |
References
- 34022 exploit vdb-entry
- blueeyecms-blueeyecmslogin-sql-injection(49104) vdb-entry
- 8165 exploit