CVE-2019-10262

A SQL Injection issue was discovered in BlueCMS 1.6. The variable $adid is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes...

CVE-2019-10262

A SQL Injection issue was discovered in BlueCMS 1.6. The variable $adid is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes...

CVE-2019-10262

CVE-2019-10262 affects BlueCMS 1.6, with a SQL injection arising from interpolating the variable $ad_id directly in uploads/admin/ad.php without quotes, allowing injection around the escape of magic quotes. Documented across multiple sources (NVD, Red Hat, CNVD, CVE lists). CVSS scores indicate h...