CVE-2019-10262 in BlueCMS

Résumé

par MITRE

A SQL Injection issue was discovered in BlueCMS 1.6. The variable $ad_id is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Réserver: 28/03/2019
• Modérer: accepté
• Entrée: VDB-132583
• CPE: prêt
• CWE: CWE-89 (confirmé)
• CVSS: 9.8 (NVD)
• EPSS: 0.00264
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-10262
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-10262
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-10262/