Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2630▼ 215 respecto a la semana anterior
Críticas / altas1379▲ 155 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)81▼ 449 respecto a la semana anterior
12 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Media (4.3) | 0.41% | — | Bluecms Project Bluecms | 10/4/2025 | 17/6/2026 | BlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del request. | |
| Analizada | Media (4.9) | 0.34% | — | Bluecms Project Bluecms | 7/10/2024 | 17/6/2026 | BlueCMS 1.6 suffers from Arbitrary File Deletion via the file_name parameter in an /admin/database.php?act=del request. | |
| Modificada | Crítica (9.8) | 0.75% | — | Bluecms Project Bluecms | 30/5/2023 | 17/6/2026 | BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php. | |
| Modificada | Crítica (9.8) | 15% | — | Bluecms Project Bluecms | 23/8/2022 | 17/6/2026 | Bluecms 1.6 has SQL injection in line 132 of admin/area.php | |
| Modificada | Crítica (9.8) | 0.88% | — | Bluecms Project Bluecms | 23/8/2022 | 17/6/2026 | BlueCMS 1.6 has SQL injection in line 55 of admin/model.php | |
| Modificada | Crítica (9.8) | 0.90% | — | Bluecms Project Bluecms | 23/8/2022 | 17/6/2026 | BlueCMS 1.6 has SQL injection in line 132 of admin/article.php | |
| Modificada | Crítica (9.8) | 1.1% | — | Bluecms Project Bluecms | 3/5/2022 | 17/6/2026 | Bluecms 1.6 has a SQL injection vulnerability at cooike. | |
| Modificada | Crítica (9.8) | 1.1% | — | Bluecms Project Bluecms | 8/9/2021 | 17/6/2026 | BlueCMS v1.6 contains a SQL injection vulnerability via /ad_js.php. | |
| Modificada | Crítica (9.8) | 1.5% | — | Bluecms Project Bluecms | 28/3/2019 | 17/6/2026 | A SQL Injection issue was discovered in BlueCMS 1.6. The variable $ad_id is spliced directly in uploads/admin/ad.php in the admin folder, and is not wrapped in single quotes, resulting in injection around the escape of magic quotes. | |
| Modificada | Crítica (9.8) | 1.5% | — | Bluecms Project Bluecms | 6/3/2019 | 17/6/2026 | BlueCMS 1.6 allows SQL Injection via the user_id parameter in an uploads/admin/user.php?act=edit request. | |
| Modificada | Crítica (9.8) | 1.1% | — | Bluecms Project Bluecms | 4/9/2018 | 17/6/2026 | BlueCMS 1.6 allows SQL Injection via the user_name parameter to uploads/user.php?act=index_login. | |
| Modificada | Alta (7.5) | 1.1% | — | Bluecms Project Bluecms | 8/10/2011 | 16/6/2026 | SQL injection vulnerability in comment.php in BlueCMS 1.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header in a send action. |