CVE-2019-10262 in BlueCMS

Сводка

по MITRE

A SQL Injection issue was discovered in BlueCMS 1.6. The variable $ad_id is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Резервировать: 28.03.2019
• Модерация: принято
• Вход: VDB-132583
• CPE: готов
• CWE: CWE-89 (Подтверждённый)
• CVSS: 9.8 (NVD)
• EPSS: 0.00264
• KEV: Нет
• Деятельности: Очень низкий

Источники

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-10262
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-10262
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-10262/