CVE-2022-37111

Description

References

• seizer-zyx/Vulnerability · Exploit

bluecms의 다른 취약점

• CVE-2025-29150보통 4.3BlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del request.
• CVE-2024-45894보통 4.9BlueCMS 1.6 suffers from Arbitrary File Deletion via the file_name parameter in an /admin/database.php?act=del request.
• CVE-2023-33734심각 9.8BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php.
• CVE-2022-37113심각 9.8Bluecms 1.6 has SQL injection in line 132 of admin/area.php
• CVE-2022-37112심각 9.8BlueCMS 1.6 has SQL injection in line 55 of admin/model.php