CVE-2024-45894

Description

References

• gist.github.com/yihanjinchangtai/215ea4bf71edb0ac9df33b221b63a3a9 · Third Party Advisory
• source-trace/bluecms · Third Party Advisory

bluecms 的其他漏洞

• CVE-2025-29150中危 4.3BlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del request.
• CVE-2023-33734严重 9.8BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php.
• CVE-2022-37113严重 9.8Bluecms 1.6 has SQL injection in line 132 of admin/area.php
• CVE-2022-37112严重 9.8BlueCMS 1.6 has SQL injection in line 55 of admin/model.php
• CVE-2022-37111严重 9.8BlueCMS 1.6 has SQL injection in line 132 of admin/article.php