CVE-2023-33734

CriticalCVSS 9.8

Published: 30/05/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.75%

50th percentile - higher than 50% of all known CVEs

BlueCMS version 1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php.

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage.

It is recommended to update BlueCMS to the latest version and to secure the application against SQL injection attacks.

Original NVD description (English source)

BlueCMS v1.6 was discovered to contain a SQL injection vulnerability via the keywords parameter at search.php.