CVE-2018-16432

NONE EPSS 62.6%
Published Sep 4, 20187y ago · Modified Jun 17, 20262w ago
Find Similar
Published Sep 4, 2018 7y ago
Last Modified Jun 17, 2026 2w ago

Description

BlueCMS 1.6 allows SQL Injection via the user_name parameter to uploads/user.php?act=index_login.

Threat Intelligence

EPSS Exploit Probability
62.6% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-89 SQL Injection Injection

Affected Products 1

VendorProductVersionRange
bluecms_projectbluecms1.6any

References 1

  • hpdoger.me http://hpdoger.me/2018/08/18/%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1%E5%A4%8D%E7%8E%B0%EF%BC%9ABluecms%201.6/
    ExploitThird Party AdvisoryURL Repurposed

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.