Bluecms 1.6 has a SQL injection vulnerability at cooike.
Bluecms
Exploit
CVE-2022-27962
NVD
Refer to CVE-2022-27962 NVD advisory