PT-2023-24462 · Bluecms · Bluecms

CVE-2023-33734

Publicado

2023-05-30

Atualizado

2025-01-13

CVSS v3.1

9.8

Crítica

Vetor

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BlueCMS version 1.6

Description A SQL injection issue was found in BlueCMS via the keywords parameter at the "search.php" endpoint.

Recommendations For BlueCMS version 1.6, avoid using the keywords parameter in the "search.php" endpoint until the issue is resolved.

Exploit

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2023-33734

Bluecms