CVE-2025-29150

BlueCMS 1.6 suffers from Arbitrary File Deletion via the id parameter in an /publish.php?act=del request.

Score

CVSS 3.1 4.3 Medium

Status

Analyzed - cve@mitre.org

Published

2025-04-10

Last modified

2025-04-10

Weaknesses

CWE-20

Affected products

• Bluecms (Bluecms Project)

References

• https://gist.github.com/electroN1chahaha/054a1af22157aa3010e89b3103ad7b9a