CVE-2019-9594

BlueCMS 1.6 allows SQL Injection via the user_id parameter in an uploads/admin/user.php?act=edit request.

Date published : 2019-03-06

https://github.com/8test/pentest/issues/1