Skip to content

Bluecms Project · weakness class

SQL Injection

10 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
1

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

  1. Bluecms 1.6 has SQL injection in line 132 of admin/area.phpCVE-2022-37113Bluecms Project · 16% likely

    CWE-89

  2. BlueCMS 1.6 allows SQL Injection via the user_id parameter in an uploads/admin/user.php?act=edit request.CVE-2019-9594Bluecms Project · 1.5% likely

    CWE-89

  3. A SQL Injection issue was discovered in BlueCMS 1.6. The variable $ad_id is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resu…CVE-2019-10262Bluecms Project · 1.5% likely

    CWE-89

  4. BlueCMS 1.6 allows SQL Injection via the user_name parameter to uploads/user.php?act=index_login.CVE-2018-16432Bluecms Project · 1.1% likely

    CWE-89

  5. BlueCMS v1.6 contains a SQL injection vulnerability via /ad_js.php.CVE-2020-19853Bluecms Project · 1.1% likely

    CWE-89

  6. Bluecms 1.6 has a SQL injection vulnerability at cooike.CVE-2022-27962Bluecms Project · 1.1% likely

    CWE-89

  7. SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header in a send action.CVE-2010-4897Bluecms Project · 1.1% likely

    CWE-89

  8. BlueCMS 1.6 has SQL injection in line 132 of admin/article.phpCVE-2022-37111Bluecms Project · 0.9% likely

    CWE-89

  9. BlueCMS 1.6 has SQL injection in line 55 of admin/model.phpCVE-2022-37112Bluecms Project · 0.9% likely

    CWE-89

  10. BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php.CVE-2023-33734Bluecms Project · CVSS 9.8 · 0.8% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.