Security Advisory

CVE-2019-9594

9.8
CRITICAL

Vulnerability Description

BlueCMS 1.6 allows SQL Injection via the user_id parameter in an uploads/admin/user.php?act=edit request.
Published Date March 6, 2019
Official Source NIST NVD Advisory