CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 严重9.8 |
BlueCMS 1.6 has SQL injection in line 55 of admin/model.php |
| 23/08/2022 |
| CVE-2022-37111 | 严重9.8 | BlueCMS 1.6 has SQL injection in line 132 of admin/article.php | 23/08/2022 |
| CVE-2022-27962 | 严重9.8 | Bluecms 1.6 has a SQL injection vulnerability at cooike. | 03/05/2022 |
| CVE-2020-19853 | 严重9.8 | BlueCMS v1.6 contains a SQL injection vulnerability via /ad_js.php. | 08/09/2021 |
| CVE-2019-10262 | 严重9.8 | A SQL Injection issue was discovered in BlueCMS 1.6. The variable $ad_id is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes. | 28/03/2019 |
| CVE-2019-9594 | 严重9.8 | BlueCMS 1.6 allows SQL Injection via the user_id parameter in an uploads/admin/user.php?act=edit request. | 06/03/2019 |
| CVE-2018-16432 | 严重9.8 | BlueCMS 1.6 allows SQL Injection via the user_name parameter to uploads/user.php?act=index_login. | 04/09/2018 |
| CVE-2010-4897 | 高危7.5 | SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header in a send action. | 08/10/2011 |