Known Vulnerabilities for products from Bluecms Project
Listed below are 10 of the newest known vulnerabilities associated with the vendor "Bluecms Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-33734 json | BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php. | 9.8 - CRITICAL | 2023-05-30 | 2023-06-06 |
| CVE-2022-37113 json | Bluecms 1.6 has SQL injection in line 132 of admin/area.php | 9.8 - CRITICAL | 2022-08-23 | 2022-08-24 |
| CVE-2022-37112 json | BlueCMS 1.6 has SQL injection in line 55 of admin/model.php | 9.8 - CRITICAL | 2022-08-23 | 2022-08-24 |
| CVE-2022-37111 json | BlueCMS 1.6 has SQL injection in line 132 of admin/article.php | 9.8 - CRITICAL | 2022-08-23 | 2022-08-24 |
| CVE-2022-27962 json | Bluecms 1.6 has a SQL injection vulnerability at cooike. | 9.8 - CRITICAL | 2022-05-03 | 2022-05-09 |
| CVE-2020-19853 json | BlueCMS v1.6 contains a SQL injection vulnerability via /ad_js.php. | 9.8 - CRITICAL | 2021-09-08 | 2021-09-10 |
| CVE-2019-10262 json | A SQL Injection issue was discovered in BlueCMS 1.6. The variable $ad_id is spliced directly in uploads/admin/ad.php in the a... | 9.8 - CRITICAL | 2019-03-28 | 2019-03-29 |
| CVE-2019-9594 json | BlueCMS 1.6 allows SQL Injection via the user_id parameter in an uploads/admin/user.php?act=edit request. | 9.8 - CRITICAL | 2019-03-06 | 2019-03-07 |
| CVE-2018-16432 json | BlueCMS 1.6 allows SQL Injection via the user_name parameter to uploads/user.php?act=index_login. | 9.8 - CRITICAL | 2018-09-04 | 2018-10-25 |
| CVE-2010-4897 json | SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X... | Not Provided | 2011-10-08 | 2026-04-29 |
Known software with vulnerabilities from Bluecms Project
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Bluecms Project | Bluecms | 1.6 |