Bluecms · Bluecms · CVE-2025-29150
Name of the Vulnerable Software and Affected Versions:
BlueCMS version 1.6
Description:
The issue allows for Arbitrary File Deletion via the `id` parameter in a "/publish.php?act=del" request. This can potentially lead to a denial of service.
Recommendations:
For BlueCMS version 1.6, avoid using the `id` parameter in the "/publish.php?act=del" request until the issue is resolved. As a temporary workaround, consider restricting access to the "/publish.php?act=del" endpoint to minimize the risk of exploitation.