236 matches found
bloofoxCMS path traversal vulnerability (CNVD-2021-41076)
bloofoxCMS is a free open source PHP + MySQL based Web content management system . A path traversal vulnerability exists in the fileurl parameter in bloofoxCMS version 0.5.2.1. An attacker can exploit this vulnerability to read local files...
bloofoxCMS Cross-Site Scripting Vulnerability (CNVD-2021-43519)
bloofoxCMS is a free open source PHP + MySQL based Web content management system . A cross-site scripting vulnerability exists in bloofoxCMS version 0.5.2.1. A remote attacker can exploit this vulnerability to execute arbitrary JS/HTML code...
bloofoxCMS Cross-Site Request Forgery Vulnerability (CNVD-2021-43375)
bloofoxCMS is a free open source PHP + MySQL based Web content management system . A cross-site request forgery vulnerability exists in bloofoxCMS version 0.5.2.1. An attacker can exploit this vulnerability to edit the content of any file...
bloofoxCMS Unrestricted File Upload Vulnerability
bloofoxCMS is a free open source PHP + MySQL based Web content management system . An unrestricted file upload vulnerability exists in bloofoxCMS version 0.5.2.1. An attacker can exploit this vulnerability to upload malicious files...
CVE-2020-35762
bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows attackers to read local files...
CVE-2020-35762
bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows attackers to read local files...
CVE-2020-35759
bloofoxCMS 0.5.2.1 is infected with a CSRF Attack that leads to an attacker editing any file content Locally/Remotely...
CVE-2020-35761
bloofoxCMS 0.5.2.1 is infected with XSS that allows remote attackers to execute arbitrary JS/HTML Code...
CVE-2020-35760
bloofoxCMS 0.5.2.1 is infected with Unrestricted File Upload that allows attackers to upload malicious files ex: php files...
CVE-2020-35761
bloofoxCMS 0.5.2.1 is infected with XSS that allows remote attackers to execute arbitrary JS/HTML Code...
CVE-2020-35760
bloofoxCMS 0.5.2.1 is infected with Unrestricted File Upload that allows attackers to upload malicious files ex: php files...
CVE-2020-35759
bloofoxCMS 0.5.2.1 is infected with a CSRF Attack that leads to an attacker editing any file content Locally/Remotely...
Design/Logic Flaw
bloofoxCMS 0.5.2.1 is infected with XSS that allows remote attackers to execute arbitrary JS/HTML Code...
Path traversal
bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows attackers to read local files...
Cross site request forgery (csrf)
bloofoxCMS 0.5.2.1 is infected with a CSRF Attack that leads to an attacker editing any file content Locally/Remotely...
CVE-2020-35759
bloofoxCMS 0.5.2.1 is infected with a CSRF Attack that leads to an attacker editing any file content Locally/Remotely...
CVE-2020-35759
The provided connected documents confirm a CSRF vulnerability in bloofoxCMS 0.5.2.1 that permits an attacker to edit the content of any file. This is described consistently across CVE-2020-35759 records (NVD entry and CNVD/CNNVD variants) as a cross-site request forgery flaw in bloofoxCMS 0.5.2.1...
CVE-2020-35760
The CVE concerns bloofoxCMS 0.5.2.1, which is affected by an Unrestricted File Upload vulnerability. The underlying issue allows attackers to upload arbitrary files (examples include PHP files), enabling potential intrusion or compromise of the web application. Publicly available connected source...