BloofoxCMS 0.5.0 - 'fileurl' Local File Inclusion

source: https://www.securityfocus.com/bid/65019/info bloofoxCMS is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. Multiple cross-site request forgery vulnerabilities 3. A local file-include vulnerability Exploiting these issues could allow an attacke...

BloofoxCMS 0.5.0 - Multiple Vulnerabilities

bloofoxCMS V0.5.0 - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.bloofox.com/download.21.html 1...

BloofoxCMS - '/bloofox/admin/index.php?Username' SQL Injection

source: https://www.securityfocus.com/bid/65019/info bloofoxCMS is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. Multiple cross-site request forgery vulnerabilities 3. A local file-include vulnerability Exploiting these issues could allow an attacke...

BloofoxCMS - '/bloofox/index.php?Username' SQL Injection

source: https://www.securityfocus.com/bid/65019/info bloofoxCMS is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. Multiple cross-site request forgery vulnerabilities 3. A local file-include vulnerability Exploiting these issues could allow an attacke...

BloofoxCMS - adminindex.php Cross-Site Request Forgery (Add Admin)

BloofoxCMS - adminindex.php Cross-Site Request Forgery Add Admin source: https://www.securityfocus.com/bid/65019/info bloofoxCMS is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. Multiple cross-site request forgery vulnerabilities 3. A local...

BloofoxCMS 0.5.0 - fileurl Local File Inclusion

BloofoxCMS 0.5.0 - fileurl Local File Inclusion source: https://www.securityfocus.com/bid/65019/info bloofoxCMS is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. Multiple cross-site request forgery vulnerabilities 3. A local file-include vulnerabilit...

BloofoxCMS 0.5.0 - Multiple Vulnerabilities

BloofoxCMS 0.5.0 - Multiple Vulnerabilities bloofoxCMS V0.5.0 - Multiple Vulnerabilties =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...

BloofoxCMS - bloofoxadminindex.php?Username SQL Injection

BloofoxCMS - bloofoxadminindex.php?Username SQL Injection source: https://www.securityfocus.com/bid/65019/info bloofoxCMS is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. Multiple cross-site request forgery vulnerabilities 3. A local file-include...

BloofoxCMS - bloofoxindex.php?Username SQL Injection

BloofoxCMS - bloofoxindex.php?Username SQL Injection source: https://www.securityfocus.com/bid/65019/info bloofoxCMS is prone to the following security vulnerabilities: 1. Multiple SQL-injection vulnerabilities 2. Multiple cross-site request forgery vulnerabilities 3. A local file-include...

BloofoxCMS - 'index.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/60585/info bloofoxCMS is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker may leverage this issue to upload arbitrary files to the...

BloofoxCMS - index.php Arbitrary File Upload

BloofoxCMS - index.php Arbitrary File Upload source: https://www.securityfocus.com/bid/60585/info bloofoxCMS is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker may leverage...

BloofoxCMS 0.3.5 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/56353/info bloofoxCMS is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context ...

bloofoxCMS 0.3.5 Cross Site Scripting

Information -------------------- Name : XSS Vulnerabilities in bloofoxCMS Software : bloofoxCMS 0.3.5 and possibly below. Vendor Homepage : http://www.bloofox.com Vulnerability Type : Cross-Site Scripting Severity : Critical Researcher : Canberk Bolat Advisory Reference : NS-12-015 Description...

BloofoxCMS 0.3.5 - Multiple Cross-Site Scripting Vulnerabilities

BloofoxCMS 0.3.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/56353/info bloofoxCMS is prone to multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

bloofoxCMS 0.4.0 CSRF Vulnerability (Add Admin)

Exploit for php platform in category web applications bloofoxCMS 0.4.0 CSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.bloofox.com/ === Exploit === bloofoxCMS Add Admin CSRF Add...

CVE-2010-4870

SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands via the gender parameter...

Sql injection

SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands via the gender parameter...

CVE-2010-4870

SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands via the gender parameter...

CVE-2010-4870

BloofoxCMS 0.3.5 is vulnerable to an SQL injection in index.php via the gender parameter, allowing remote attackers to execute arbitrary SQL commands. This CVE (CVE-2010-4870) is backed by multiple sources (NVD entry and OpenVAS/PRION listings) that confirm the flaw and impact (high severity, CVS...

PT-2011-1805

Name of the Vulnerable Software and Affected Versions BloofoxCMS version 0.3.5 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the gender parameter in the "index.php" endpoint. Recommendations For BloofoxCMS version 0.3.5, consider restricting...