236 matches found
CVE-2020-36082
CVE-2020-36082 concerns bloofoxCMS version 0.5.2.1. The vulnerability is a file upload flaw in the upload module that allows an attacker to upload a crafted webshell, enabling remote code execution and privilege escalation. The available connected sources describe the issue consistently but do no...
bloofoxCMS 代码问题漏洞
bloofoxCMS is Bloofox bloofoxCMS individual developers of a Php-based text content management system. A file upload vulnerability exists in bloofoxCMS version 0.5.2.1, which stems from the application's lack of valid validation of uploaded files. The vulnerability can be exploited to execute...
CVE-2020-36082
File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via crafted webshell file to upload module...
CVE-2020-36082
File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via crafted webshell file to upload module...
bloofoxCMS SQL Injection Vulnerability (CNVD-2023-52855)
bloofoxCMS is Bloofox bloofoxCMS individual developers of a Php-based text content management system. A SQL injection vulnerability exists in bloofoxCMS version v0.5.2.1, which can be exploited by attackers to obtain sensitive information from the database...
bloofoxCMS SQL注入漏洞
bloofoxCMS is a Php-based text content management system by the individual developer of bloofoxCMS. A security vulnerability exists in bloofoxCMS version v0.5.2.1, which stems from the cid parameter found to contain an SQL injection vulnerability via...
bloofoxCMS SQL注入漏洞
bloofoxCMS is a Php-based text content management system by the individual developer of bloofoxCMS. A security vulnerability exists in bloofoxCMS version v0.5.2.1, which stems from a userid parameter found to contain an SQL injection vulnerability via admin/index.php?mode=user&action=edit...
bloofoxCMS SQL注入漏洞
bloofoxCMS is bloofox bloofoxCMS individual developers of a Php-based text content management system. A security vulnerability exists in bloofoxCMS version v0.5.2.1, which stems from a SQL injection vulnerability contained in the lid parameter found via...
bloofoxCMS SQL注入漏洞
bloofoxCMS is Bloofox bloofoxCMS individual developers of a Php-based text content management system. A SQL injection vulnerability exists in bloofoxCMS version v0.5.2.1, which can be exploited by attackers to obtain sensitive information from the database...
bloofoxCMS SQL注入漏洞
bloofoxCMS is a Php-based text content management system by the individual developer of bloofoxCMS. A security vulnerability exists in bloofoxCMS version v0.5.2, which originates from an SQL injection in component/index.php?mode=content&page=pages&action=edit&eid=1...
bloofoxCMS 路径遍历漏洞
bloofoxCMS is a Php-based text content management system by the individual developer of bloofoxCMS. A security vulnerability exists in bloofoxCMS version v0.5.2, which stems from the discovery of an arbitrary file deletion vulnerability contained via the deletefile function...
CVE-2023-23151
bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file deletion vulnerability via the component /include/inccontentmedia.php...
Arbitrary file deletion
bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file deletion vulnerability via the component /include/inccontentmedia.php...
bloofoxCMS 安全漏洞
bloofoxCMS is a Php-based text content management system by the individual developer of bloofoxCMS. A security vulnerability exists in bloofoxCMS version v0.5.2.1, which originates from the discovery of an include arbitrary file deletion vulnerability via the component /include/inccontentmedia.ph...
CVE-2023-23151
bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file deletion vulnerability via the component /include/inccontentmedia.php...
CVE-2023-23151
bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file deletion vulnerability via the component /include/inccontentmedia.php...
CVE-2023-23151
bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file deletion vulnerability via the component /include/inccontentmedia.php...
CVE-2023-23151
CVE-2023-23151 affects bloofoxCMS v0.5.2.1, where an arbitrary file deletion vulnerability exists in the include/inc_content_media.php component. The issue is documented with a CVSS 3.1 base score of 6.5 (Medium) and shows integrity and availability impacts (I: HIGH, A: HIGH) with network attack ...
