CVE-2019-9594

BlueCMS 1.6 allows SQL Injection via the userid parameter in an uploads/admin/user.php?act=edit request...

CVE-2019-9594: Improper Neutralization of Special Elements used in an SQL Command

BlueCMS 1.6 allows SQL Injection via the userid parameter in an uploads/admin/user.php?act=edit request...

PT-2019-19734

Name of the Vulnerable Software and Affected Versions BlueCMS version 1.6 Description The issue allows SQL Injection via the user id parameter in a "uploads/admin/user.php?act=edit" request. Recommendations For BlueCMS version 1.6, consider restricting access to the...