| Package | Affected versions | Patched versions |
|---|---|---|
| bluecms | = 1.6 |
A SQL Injection issue was discovered in BlueCMS 1.6. The variable $ad_id is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free