CVE-2022-38922

CVE-2022-38922 is a critical SQL injection vulnerability affecting BluePage CMS versions through 3.9. An attacker can exploit an unsanitized HTTP Header Cookie value to inject malicious SQL code, specifically a time-based blind SLEEP payload, leading to full compromise of confidentiality, integrity, and availability. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network without authentication or user interaction. While no public exploits or active exploitation have been observed, and community discussion is minimal, the high severity warrants immediate attention for affected systems.