Vulnerabilities

TI-2025-20999 CVE-2025-29150 · GHSA-pcgm-c94v-2jw9

BlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del request.

LOW 20

BlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del request.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00424 Published 2025-04-10 No fix listed CWE-20

TI-2024-30838 CVE-2024-45894 · GHSA-q8xm-x824-w6gf

BlueCMS 1.6 suffers from Arbitrary File Deletion via the file_name parameter in an /admin/database.php?act=del request.

LOW 22

BlueCMS 1.6 suffers from Arbitrary File Deletion via the file_name parameter in an /admin/database.php?act=del request.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00335 Published 2024-10-07 No fix listed CWE-552

TI-2023-16659 CVE-2023-33734 · GHSA-qwgx-3g2m-7p5h

BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php.

MEDIUM 50

BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00752 Published 2023-05-30 No fix listed CWE-89

TI-2022-17294 CVE-2022-37111 · GHSA-qg2p-jf3c-7jj5

BlueCMS 1.6 has SQL injection in line 132 of admin/article.php

MEDIUM 44

BlueCMS 1.6 has SQL injection in line 132 of admin/article.php

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00921 Published 2022-08-23 No fix listed CWE-89

TI-2022-17295 CVE-2022-37112 · GHSA-rf83-r9rq-r43x

BlueCMS 1.6 has SQL injection in line 55 of admin/model.php

MEDIUM 44

BlueCMS 1.6 has SQL injection in line 55 of admin/model.php

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00902 Published 2022-08-23 No fix listed CWE-89

TI-2022-17296 CVE-2022-37113 · GHSA-vqj8-99f8-jxjp

Bluecms 1.6 has SQL injection in line 132 of admin/area.php

MEDIUM 58

Bluecms 1.6 has SQL injection in line 132 of admin/area.php

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.15277 Published 2022-08-23 No fix listed CWE-89

TI-2022-10823 CVE-2022-27962 · GHSA-44qf-wf2j-gvwr

Bluecms 1.6 has a SQL injection vulnerability at cooike.

MEDIUM 44

Bluecms 1.6 has a SQL injection vulnerability at cooike.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01096 Published 2022-05-03 No fix listed CWE-89

TI-2020-13715 CVE-2020-19853 · GHSA-8p8h-5fcm-8gc4

BlueCMS v1.6 contains a SQL injection vulnerability via /ad_js.php.

MEDIUM 44

BlueCMS v1.6 contains a SQL injection vulnerability via /ad_js.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01133 Published 2021-09-07 No fix listed CWE-89

TI-2019-07574 CVE-2019-10262 · GHSA-rfhv-765v-vm5j

A SQL Injection issue was discovered in BlueCMS 1.6.

MEDIUM 45

A SQL Injection issue was discovered in BlueCMS 1.6.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01452 Published 2019-03-28 No fix listed CWE-89

TI-2019-07012 CVE-2019-9594 · GHSA-xh2g-2958-rp54

BlueCMS 1.6 allows SQL Injection via the user_id parameter in an uploads/admin/user.php?act=edit request.

MEDIUM 45

BlueCMS 1.6 allows SQL Injection via the user_id parameter in an uploads/admin/user.php?act=edit request.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01452 Published 2019-03-06 No fix listed CWE-89

TI-2018-11781 CVE-2018-16432 · GHSA-jx77-rw95-4j5h

BlueCMS 1.6 allows SQL Injection via the user_name parameter to uploads/user.php?act=index_login.

MEDIUM 44

BlueCMS 1.6 allows SQL Injection via the user_name parameter to uploads/user.php?act=index_login.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01135 Published 2018-09-04 No fix listed CWE-89

TI-2010-04620 CVE-2010-4897 · GHSA-w7jq-m96j-xq9g

SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to…

LOW 35

SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header in a send action.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01072 Published 2011-10-08 No fix listed CWE-89

Vulnerabilities

Filters