bloofoxCMS 'search' Parameter Cross Site Scripting Vulnerability

bloofoxCMS is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input passed through the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

bloofoxCMS Detection

This host is running bloofoxCMS, a free open source content management system. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

bloofoxCMS 'search' Parameter Cross Site Scripting Vulnerability

bloofoxCMS is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input passed through the 'search' parameter. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

BloofoxCMS 0.3.5 - search Cross-Site Scripting

BloofoxCMS 0.3.5 - search Cross-Site Scripting source: https://www.securityfocus.com/bid/36700/info bloofoxCMS is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input passed through the 'search' parameter. An attacker may leverag...

BloofoxCMS 0.3.5 - 'search' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36700/info bloofoxCMS is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input passed through the 'search' parameter. An attacker may leverage this issue to execute arbitrary script code i...

CVE-2008-5748

Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to read arbitrary files via the 1 lang, 2 theme, and 3 module parameters...

Directory traversal

Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to read arbitrary files via the 1 lang, 2 theme, and 3 module parameters...

CVE-2008-5748

BloofoxCMS 0.3.4 is affected by a directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php, exploitable via the lang, theme, and module parameters to read arbitrary files. This aligns with multiple sources (NVD entry and vendor references) noting the same path and parameter-based exp...

CVE-2008-5748

Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to read arbitrary files via the 1 lang, 2 theme, and 3 module parameters...

PT-2008-6798 · Bloofox · Bloofoxcms

Name of the Vulnerable Software and Affected Versions: BloofoxCMS version 0.3.4 Description: A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved via the lang, theme, and module parameters in the plugins/spaw2/dialogs/dialog.php file...

BloofoxCMS 0.3.4 (lang) Local File Inclusion Vulnerability

No description provided by source. BloofoxCMS 0.3.4 http://www.bloofox.com/ magicquotesgpc = Off registerglobals = On - File Inclusion - http://site/bloofoxCMS0.3.4/plugins/spaw2/dialogs/dialog.php?lang=../../../../../../../../../../../../etc/passwd%00 Also vulnerable: dialog.php?theme=lfi...

BloofoxCMS 0.3.4 - lang Local File Inclusion

BloofoxCMS 0.3.4 - lang Local File Inclusion BloofoxCMS 0.3.4 http://www.bloofox.com/ magicquotesgpc = Off registerglobals = On - File Inclusion - http://site/bloofoxCMS0.3.4/plugins/spaw2/dialogs/dialog.php?lang=../../../../../../../../../../../../etc/passwd%00 Also vulnerable: dialog.php?theme=...

BloofoxCMS 0.3.4 (lang) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================== BloofoxCMS 0.3.4 lang Local File Inclusion Vulnerability ========================================================== BloofoxCMS 0.3.4 http://www.bloofox.com/ magicquotesgpc = Off...

BloofoxCMS 0.3.4 - 'lang' Local File Inclusion

BloofoxCMS 0.3.4 http://www.bloofox.com/ magicquotesgpc = Off registerglobals = On - File Inclusion - http://site/bloofoxCMS0.3.4/plugins/spaw2/dialogs/dialog.php?lang=../../../../../../../../../../../../etc/passwd%00 Also vulnerable: dialog.php?theme= dialog.php?dialog=foo&module= - Seasons...

Sql injection

Multiple SQL injection vulnerabilities in the login function in system/classpermissions.php in bloofoxCMS 0.3 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to admin/index.php...

CVE-2008-0427

Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2008-0428

Multiple SQL injection vulnerabilities in the login function in system/classpermissions.php in bloofoxCMS 0.3 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to admin/index.php...

Directory traversal

Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2008-0428

Multiple SQL injection vulnerabilities in the login function of bloofoxCMS 0.3 (system/class_permissions.php) allow remote attackers to inject arbitrary SQL via the username or password parameters to admin/index.php. Affects the login routine due to improper input sanitization; documented under C...

CVE-2008-0428

Multiple SQL injection vulnerabilities in the login function in system/classpermissions.php in bloofoxCMS 0.3 allow remote attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to admin/index.php...