110 matches found
CVE-2023-34751
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the gid parameter at admin/index.php?mode=user&page=groups&action=edit...
CVE-2023-34752
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at admin/index.php?mode=settings&page=lang&action=edit...
bloofoxCMS SQL注入漏洞
bloofoxCMS is bloofox bloofoxCMS individual developers of a Php-based text content management system. A security vulnerability exists in bloofoxCMS version v0.5.2.1, which stems from a pid parameter found to contain an SQL injection vulnerability via...
CVE-2023-34753
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the tid parameter at admin/index.php?mode=settings&page=tmpl&action=edit...
PT-2023-25002 · Bloofox · Bloofox
Name of the Vulnerable Software and Affected Versions: bloofox version 0.5.2.1 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the cid parameter at the "admin/index.php?mode=settings&page=charset&action=edit" endpoint. Recommendations: For bloofox versi...
bloofoxCMS SQL注入漏洞
bloofoxCMS is bloofox bloofoxCMS individual developers of a Php-based text content management system. A security vulnerability exists in bloofoxCMS version v0.5.2.1, which stems from a tid parameter found to contain an SQL injection vulnerability via...
CVE-2023-34750
The CVE-2023-34750 entry concerns bloofox v0.5.2.1, which is affected by a SQL injection via the cid parameter in admin/index.php?mode=settings&page=projects&action=edit. The vulnerability is described with a high/Critical impact (C/H/I/H, CVSS 3.1: 9.8) across confidentiality, integrity, and ava...
CVE-2023-34750
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings&page=projects&action=edit...
CVE-2023-34750
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings&page=projects&action=edit...
CVE-2023-34756
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings&page=charset&action=edit...
CVE-2023-34752
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at admin/index.php?mode=settings&page=lang&action=edit...
CVE-2023-34751
CVE-2023-34751 affects bloofoxCMS v0.5.2.1. The connected sources describe a SQL injection vulnerability exploitable via the gid parameter in admin/index.php?mode=user&page=groups&action=edit. Practical impact states authenticated attackers can perform time-based SQL injection to extract sensitiv...
CVE-2023-34755
Vulnerability: SQL Injection in bloofoxCMS v0.5.2.1 via the userid parameter in admin/index.php?mode=user&action=edit. Impact (per connected sources): authenticated attackers could extract database contents, manipulate user accounts, and potentially gain administrator access. Root cause (stated):...
PT-2023-25001 · Bloofox · Bloofox
Name of the Vulnerable Software and Affected Versions: bloofox version 0.5.2.1 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the userid parameter at the "admin/index.php?mode=user&action=edit" endpoint. Recommendations: For bloofox version 0.5.2.1,...
PT-2023-24998 · Bloofox · Bloofox
Name of the Vulnerable Software and Affected Versions: bloofox version 0.5.2.1 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the lid parameter at the "admin/index.php?mode=settings&page=lang&action=edit" endpoint. Recommendations: For...
CVE-2023-34754
Affected software: bloofox CMS 0.5.2.1. Vulnerability: SQL injection in the pid parameter of admin/index.php?mode=settings&page=plugins&action=edit. Root cause: input from pid is used in SQL without sufficient sanitization (CWE-89). Impact: arbitrary SQL queries, potentially leading to data leaka...
CVE-2023-34753
bloofoxCMS v0.5.2.1 contains a SQL injection vulnerability via the tid parameter in admin/index.php?mode=settings&page=tmpl&action=edit. The vulnerability is caused by unsafely interpolating the tid value into SQL, allowing an attacker to extract database contents, manipulate CMS data, and potent...
CVE-2023-27812
bloofox v0.5.2 was discovered to contain an arbitrary file deletion vulnerability via the deletefile function...
