CVE-2024-45894

概要

参考情報

• gist.github.com/yihanjinchangtai/215ea4bf71edb0ac9df33b221b63a3a9 · Third Party Advisory
• source-trace/bluecms · Third Party Advisory

bluecms のその他の脆弱性

• CVE-2025-29150中 4.3BlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del request.
• CVE-2023-33734緊急 9.8BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php.
• CVE-2022-37113緊急 9.8Bluecms 1.6 has SQL injection in line 132 of admin/area.php
• CVE-2022-37112緊急 9.8BlueCMS 1.6 has SQL injection in line 55 of admin/model.php
• CVE-2022-37111緊急 9.8BlueCMS 1.6 has SQL injection in line 132 of admin/article.php