CVE-2019-10262 in BlueCMS

الملخص

بحسب MITRE

A SQL Injection issue was discovered in BlueCMS 1.6. The variable $ad_id is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• حجز: 28/03/2019
• الاعتدال: تمت الموافقة
• إدخال: VDB-132583
• CPE: جاهز
• CWE: CWE-89 (مؤكد)
• CVSS: 9.8 (NVD)
• EPSS: 0.00264
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-10262
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-10262
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-10262/