BlueCMS 1.6 suffers from Arbitrary File Deletion via the file_name parameter in an /admin/database.php?act=del request.

Published Oct 7, 2024 · Updated Nov 25, 2024 · Assigned by mitre