CVE-2019-10262: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection issue was discovered in BlueCMS 1.6. The variable $adid is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes...

PT-2019-11667

Name of the Vulnerable Software and Affected Versions: BlueCMS version 1.6 Description: A SQL Injection issue was discovered. The variable ad id is directly spliced in uploads/admin/ad.php in the admin folder and is not wrapped in single quotes, resulting in injection around the escape of magic...

CVE-2012-1935: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote attackers to inject arbitrary web script or HTML via the 1 Back parameter to admin/ad.php, or the 2 token or 3 femail parameter to admin/passwordchecktoken.php...

PT-2012-3666

Name of the Vulnerable Software and Affected Versions Newscoop versions 3.5.x through 3.5.4 Newscoop versions 4.x through 4 RC3 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the "Back" parameter to "admin/ad.php", or the token or f...