CVE-2026-116253

A vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function common.inc.php::RunMagicQuotes of the file plus/adjs.php of the component Advertisement Rendering. Executing a manipulation of the argument aid can lead to code injection. The attack can be executed remotel...

CVE-2026-116253

The software DedeCMS 5.7.118 is vulnerable to a code injection vulnerability within the Advertisement Rendering component. Specifically, the issue resides in the plus/ad_js.php file and involves the common.inc.php::_RunMagicQuotes function. An attacker can exploit this remotely by manipulating th...

EUVD-2026-109685

A vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function common.inc.php::RunMagicQuotes of the file plus/adjs.php of the component Advertisement Rendering. Executing a manipulation of the argument aid can lead to code injection. The attack can be executed remotel...

CVE-2026-116253 DedeCMS Advertisement Rendering ad_js.php _RunMagicQuotes code injection

A vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function common.inc.php::RunMagicQuotes of the file plus/adjs.php of the component Advertisement Rendering. Executing a manipulation of the argument aid can lead to code injection. The attack can be executed remotel...

CVE-2026-116253 DedeCMS Advertisement Rendering ad_js.php _RunMagicQuotes code injection

A vulnerability was determined in DedeCMS 5.7.118. This vulnerability affects the function common.inc.php::RunMagicQuotes of the file plus/adjs.php of the component Advertisement Rendering. Executing a manipulation of the argument aid can lead to code injection. The attack can be executed remotel...

DedeCMS input validation error vulnerability

Version 5.7.118 of DedeCMS contains a security vulnerability stemming from improper handling of the aid parameter in the plus/adjs.php file, which may lead to code injection...

CVE-2020-19853

BlueCMS v1.6 contains a SQL injection vulnerability via /adjs.php...

CVE-2020-19853

BlueCMS v1.6 contains a SQL injection vulnerability via /adjs.php...

CVE-2020-19853

BlueCMS v1.6 contains a SQL injection vulnerability via /adjs.php...

Sql injection

BlueCMS v1.6 contains a SQL injection vulnerability via /adjs.php...

CVE-2020-19853

BlueCMS v1.6 contains a SQL injection vulnerability via /adjs.php...

CVE-2020-19853

BlueCMS v1.6 contains a SQL injection vulnerability exploitable via the /ad_js.php endpoint. The issue is documented across multiple sources (NVD CVE-2020-19853, Red Hat advisory, CNNVD, etc.). According to NVD, CVSS v2 base 7.5 (HIGH) and CVSS v3.1 base 9.8 (CRITICAL) indicate network-exposed, l...

CVE-2020-19853

BlueCMS v1.6 contains a SQL injection vulnerability via /adjs.php...

BlueCMS SQL Injection Vulnerability

BlueCMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in BlueCMS version 1.6, which can be triggered by an attacker via "/adjs.php"...

CVE-2020-19853: Improper Neutralization of Special Elements used in an SQL Command

BlueCMS v1.6 contains a SQL injection vulnerability via /adjs.php...

BlueCMS v1. 6 sp1 ad_js.php SQL injection vulnerability-vulnerability warning-the black bar safety net

Affected version: BlueCMS v1. 6 sp1 Vulnerability description: The defect file: adjs.php Vulnerability causes: the 1 2: $adid = ! empty$GET'adid' ? trim$GET'adid' : "; //root directory of the other files are doing a very good filter, the logarithm of the font variables almost always use intvalto ...

BlueCMS v1.6 sp1 ad_js.php SQL注入漏洞

缺陷文件：adjs.php 漏洞成因： 12: $adid = !empty$GET'adid' ? trim$GET'adid' : ''; //根目录下其他文件都做了很好的过滤，对数字型变量几乎都用了intval做限制，唯独漏了这个文件，居然只是用了trim去除头尾空格。。 19: $ad = $db-getone"SELECT FROM ".table'ad'." WHERE adid =".$adid; //直接代入查询 BlueCMS v1.6 sp1 SEBUG临时解决办法： $adid = !empty$GET'adid' ? intval$GET'adid' : '';...