VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Mar 28, 2019· Updated Jun 17, 2026

CVE-2019-10262

CVE-2019-10262

Description

A SQL Injection issue was discovered in BlueCMS 1.6. The variable $ad_id is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes.

Affected products

2
  • Bluecms Project/Bluecms2 versions
    cpe:2.3:a:bluecms_project:bluecms:1.6:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:bluecms_project:bluecms:1.6:*:*:*:*:*:*:*
    • (no CPE)range: =1.6

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.