Security Advisory
CVE-2019-10262
9.8
CRITICAL
Vulnerability Description
A SQL Injection issue was discovered in BlueCMS 1.6. The variable $ad_id is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes.
Published Date
March 28, 2019
Official Source
NIST NVD Advisory