CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 심각9.8 |
BlueCMS 1.6 has SQL injection in line 55 of admin/model.php |
| 23/08/2022 |
| CVE-2022-37111 | 심각9.8 | BlueCMS 1.6 has SQL injection in line 132 of admin/article.php | 23/08/2022 |
| CVE-2022-27962 | 심각9.8 | Bluecms 1.6 has a SQL injection vulnerability at cooike. | 03/05/2022 |
| CVE-2020-19853 | 심각9.8 | BlueCMS v1.6 contains a SQL injection vulnerability via /ad_js.php. | 08/09/2021 |
| CVE-2019-10262 | 심각9.8 | A SQL Injection issue was discovered in BlueCMS 1.6. The variable $ad_id is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes. | 28/03/2019 |
| CVE-2019-9594 | 심각9.8 | BlueCMS 1.6 allows SQL Injection via the user_id parameter in an uploads/admin/user.php?act=edit request. | 06/03/2019 |
| CVE-2018-16432 | 심각9.8 | BlueCMS 1.6 allows SQL Injection via the user_name parameter to uploads/user.php?act=index_login. | 04/09/2018 |
| CVE-2010-4897 | 높음7.5 | SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header in a send action. | 08/10/2011 |