CVE-2019-10262 in BlueCMS

Zusammenfassung

von MITRE

A SQL Injection issue was discovered in BlueCMS 1.6. The variable $ad_id is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservieren: 28.03.2019
• Moderieren: akzeptiert
• Eintrag: VDB-132583
• CPE: bereit
• CWE: CWE-89 (bestätigt)
• CVSS: 9.8 (NVD)
• EPSS: 0.00264
• KEV: nein
• Aktivitäten: very low

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-10262
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-10262
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-10262/