Skip to content
Noroxi

blueriver records

5 published records for vendor blueriver.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2008-6434
    30Monitor

    SQL injection vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to execute arbitrar

    HighCVSS 7.5No exploitEPSS 1%

    blueriver · sava cmsMar 6, 2009

  • CVE-2018-7486
    29Monitor

    Blue River Mura CMS before v7.0.7029 supports inline function calls with an [m] tag and [/m] end tag, without proper restrictions on file ty

    HighCVSS 7.2No exploitEPSS 2%

    blueriver · muracmsFeb 26, 2018

  • CVE-2010-3468
    22Monitor

    Directory traversal vulnerability in fileManager.cfc in Mura CMS 5.1 before 5.1.498 and 5.2 before 5.2.2809, and Sava CMS 5 through 5.2, all

    MediumCVSS 5.0Proof of conceptEPSS 6%

    blueriver · sava cmsSep 29, 2010

  • CVE-2017-8302
    21Monitor

    Mura CMS 7.0.6967 allows admin/?muraAction= XSS attacks, related to admin/core/views/carch/list.cfm, admin/core/views/carch/loadsiteflat.cfm

    MediumCVSS 5.4No exploitEPSS 0%

    blueriver · muracmsApr 27, 2017

  • CVE-2008-6433
    17Monitor

    Cross-site scripting (XSS) vulnerability in index.cfm in Blue River Interactive Group Sava CMS before 5.0.122 allows remote attackers to inj

    MediumCVSS 4.3No exploitEPSS 1%

    blueriver · sava cmsMar 6, 2009