283 matches found
bloofoxCMS path traversal vulnerability (CNVD-2021-41076)
bloofoxCMS is a free open source PHP + MySQL based Web content management system . A path traversal vulnerability exists in the fileurl parameter in bloofoxCMS version 0.5.2.1. An attacker can exploit this vulnerability to read local files...
CVE-2020-35762
bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows attackers to read local files...
CVE-2020-35762
bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows attackers to read local files...
CVE-2020-35761
bloofoxCMS 0.5.2.1 is infected with XSS that allows remote attackers to execute arbitrary JS/HTML Code...
CVE-2020-35759
bloofoxCMS 0.5.2.1 is infected with a CSRF Attack that leads to an attacker editing any file content Locally/Remotely...
CVE-2020-35760
bloofoxCMS 0.5.2.1 is infected with Unrestricted File Upload that allows attackers to upload malicious files ex: php files...
CVE-2020-35761
bloofoxCMS 0.5.2.1 is infected with XSS that allows remote attackers to execute arbitrary JS/HTML Code...
CVE-2020-35760
bloofoxCMS 0.5.2.1 is infected with Unrestricted File Upload that allows attackers to upload malicious files ex: php files...
CVE-2020-35759
bloofoxCMS 0.5.2.1 is infected with a CSRF Attack that leads to an attacker editing any file content Locally/Remotely...
Design/Logic Flaw
bloofoxCMS 0.5.2.1 is infected with XSS that allows remote attackers to execute arbitrary JS/HTML Code...
Cross site request forgery (csrf)
bloofoxCMS 0.5.2.1 is infected with a CSRF Attack that leads to an attacker editing any file content Locally/Remotely...
Path traversal
bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows attackers to read local files...
CVE-2020-35759
bloofoxCMS 0.5.2.1 is infected with a CSRF Attack that leads to an attacker editing any file content Locally/Remotely...
CVE-2020-35759
bloofoxCMS 0.5.2.1 is infected with a CSRF Attack that leads to an attacker editing any file content Locally/Remotely...
CVE-2020-35759
The provided connected documents confirm a CSRF vulnerability in bloofoxCMS 0.5.2.1 that permits an attacker to edit the content of any file. This is described consistently across CVE-2020-35759 records (NVD entry and CNVD/CNNVD variants) as a cross-site request forgery flaw in bloofoxCMS 0.5.2.1...
CVE-2020-35760
bloofoxCMS 0.5.2.1 is infected with Unrestricted File Upload that allows attackers to upload malicious files ex: php files...
CVE-2020-35760
bloofoxCMS 0.5.2.1 is infected with Unrestricted File Upload that allows attackers to upload malicious files ex: php files...
CVE-2020-35760
The CVE concerns bloofoxCMS 0.5.2.1, which is affected by an Unrestricted File Upload vulnerability. The underlying issue allows attackers to upload arbitrary files (examples include PHP files), enabling potential intrusion or compromise of the web application. Publicly available connected source...
CVE-2020-35761
CVE-2020-35761 affects bloofoxCMS 0.5.2.1, where a cross-site scripting (XSS) vulnerability exists that allows remote attackers to execute arbitrary JavaScript/HTML code. The connected sources consistently describe a XSS in bloofoxCMS 0.5.2.1, but do not provide concrete exploitation details, aff...