bluecms project records

12 published records for vendor bluecms project.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

12 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
44Plan	CVE-2022-37113No exploit	Bluecms 1.6 has SQL injection in line 132 of admin/area.phpbluecms project · bluecms · CWE-89 Pre-auth SQL injection	Critical9.8	—	15.2%	Aug 23, 2022
39Monitor	CVE-2019-10262No exploit	A SQL Injection issue was discovered in BlueCMS 1.6.bluecms project · bluecms · CWE-89 Pre-auth SQL injection	Critical9.8	—	1.4%	Mar 28, 2019
39Monitor	CVE-2019-9594No exploit	BlueCMS 1.6 allows SQL Injection via the user_id parameter in an uploads/admin/user.php?act=edit request.bluecms project · bluecms · CWE-89 Pre-auth SQL injection	Critical9.8	—	1.4%	Mar 6, 2019
39Monitor	CVE-2018-16432No exploit	BlueCMS 1.6 allows SQL Injection via the user_name parameter to uploads/user.php?act=index_login.bluecms project · bluecms · CWE-89 Pre-auth SQL injection	Critical9.8	—	1.1%	Sep 3, 2018
39Monitor	CVE-2020-19853No exploit	BlueCMS v1.6 contains a SQL injection vulnerability via /ad_js.php.bluecms project · bluecms · CWE-89 Pre-auth SQL injection	Critical9.8	—	1.1%	Sep 7, 2021
39Monitor	CVE-2022-27962No exploit	Bluecms 1.6 has a SQL injection vulnerability at cooike.bluecms project · bluecms · CWE-89 Pre-auth SQL injection	Critical9.8	—	1.0%	May 3, 2022
39Monitor	CVE-2022-37111No exploit	BlueCMS 1.6 has SQL injection in line 132 of admin/article.phpbluecms project · bluecms · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.9%	Aug 23, 2022
39Monitor	CVE-2022-37112No exploit	BlueCMS 1.6 has SQL injection in line 55 of admin/model.phpbluecms project · bluecms · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.9%	Aug 23, 2022
39Monitor	CVE-2023-33734No exploit	BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php.bluecms project · bluecms · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.7%	May 30, 2023
30Monitor	CVE-2010-4897No exploit	SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For bluecms project · bluecms · CWE-89 pre-auth RCE SQL injection	High7.5	—	1.0%	Oct 8, 2011
19Monitor	CVE-2024-45894No exploit	BlueCMS 1.6 suffers from Arbitrary File Deletion via the file_name parameter in an /admin/database.php?act=del request.bluecms project · bluecms · CWE-552	Medium4.9	—	0.3%	Oct 7, 2024
17Monitor	CVE-2025-29150No exploit	BlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del request.bluecms project · bluecms · CWE-20 Denial of service	Medium4.3	—	0.4%	Apr 10, 2025

CVE-2022-37113
44Plan
Bluecms 1.6 has SQL injection in line 132 of admin/area.php
CriticalCVSS 9.8No exploitEPSS 15%
- Pre-auth
- SQL injection
bluecms project · bluecmsAug 23, 2022
CVE-2019-10262
39Monitor
A SQL Injection issue was discovered in BlueCMS 1.6.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
bluecms project · bluecmsMar 28, 2019
CVE-2019-9594
39Monitor
BlueCMS 1.6 allows SQL Injection via the user_id parameter in an uploads/admin/user.php?act=edit request.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
bluecms project · bluecmsMar 6, 2019
CVE-2018-16432
39Monitor
BlueCMS 1.6 allows SQL Injection via the user_name parameter to uploads/user.php?act=index_login.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
bluecms project · bluecmsSep 3, 2018
CVE-2020-19853
39Monitor
BlueCMS v1.6 contains a SQL injection vulnerability via /ad_js.php.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
bluecms project · bluecmsSep 7, 2021
CVE-2022-27962
39Monitor
Bluecms 1.6 has a SQL injection vulnerability at cooike.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
bluecms project · bluecmsMay 3, 2022
CVE-2022-37111
39Monitor
BlueCMS 1.6 has SQL injection in line 132 of admin/article.php
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
bluecms project · bluecmsAug 23, 2022
CVE-2022-37112
39Monitor
BlueCMS 1.6 has SQL injection in line 55 of admin/model.php
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
bluecms project · bluecmsAug 23, 2022
CVE-2023-33734
39Monitor
BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
bluecms project · bluecmsMay 30, 2023
CVE-2010-4897
30Monitor
SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For
HighCVSS 7.5No exploitEPSS 1%
- pre-auth RCE
- SQL injection
bluecms project · bluecmsOct 8, 2011
CVE-2024-45894
19Monitor
BlueCMS 1.6 suffers from Arbitrary File Deletion via the file_name parameter in an /admin/database.php?act=del request.
MediumCVSS 4.9No exploitEPSS 0%
bluecms project · bluecmsOct 7, 2024
CVE-2025-29150
17Monitor
BlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del request.
MediumCVSS 4.3No exploitEPSS 0%
- Denial of service
bluecms project · bluecmsApr 10, 2025