CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CRITICAL9.8 |
BlueCMS 1.6 has SQL injection in line 55 of admin/model.php |
| 23/08/2022 |
| CVE-2022-37111 | CRITICAL9.8 | BlueCMS 1.6 has SQL injection in line 132 of admin/article.php | 23/08/2022 |
| CVE-2022-27962 | CRITICAL9.8 | Bluecms 1.6 has a SQL injection vulnerability at cooike. | 03/05/2022 |
| CVE-2020-19853 | CRITICAL9.8 | BlueCMS v1.6 contains a SQL injection vulnerability via /ad_js.php. | 08/09/2021 |
| CVE-2019-10262 | CRITICAL9.8 | A SQL Injection issue was discovered in BlueCMS 1.6. The variable $ad_id is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes. | 28/03/2019 |
| CVE-2019-9594 | CRITICAL9.8 | BlueCMS 1.6 allows SQL Injection via the user_id parameter in an uploads/admin/user.php?act=edit request. | 06/03/2019 |
| CVE-2018-16432 | CRITICAL9.8 | BlueCMS 1.6 allows SQL Injection via the user_name parameter to uploads/user.php?act=index_login. | 04/09/2018 |
| CVE-2010-4897 | HIGH7.5 | SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header in a send action. | 08/10/2011 |