Back to Database
Status published
Critical
CVE-2019-10262
A SQL Injection issue was discovered in BlueCMS 1.6. The...
Vulnerability Description
A SQL Injection issue was discovered in BlueCMS 1.6. The variable $ad_id is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-10262
Credits & Attribution
No credits recorded in the NVD database.
References
More from bluecms project
View All →CVE-2022-37113
Bluecms 1.6 has SQL injection in line 132 of admin/area.php...
Critical
9.8
CVE-2022-37112
BlueCMS 1.6 has SQL injection in line 55 of admin/model.php...
Critical
9.8
CVE-2022-37111
BlueCMS 1.6 has SQL injection in line 132 of admin/article.php...
Critical
9.8
CVE-2022-27962
Bluecms 1.6 has a SQL injection vulnerability at cooike....
Critical
9.8
CVE-2020-19853
BlueCMS v1.6 contains a SQL injection vulnerability via /ad_js.php....
Critical
9.8
Affected Vendor
bluecms project
View all reports →Affected Software
bluecms
Vulnerable Versions:
1.6
Timeline
Official Publish:
March 28th, 2019
Last Modified:
August 4th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.