5 matches found
CVE-2023-34752
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at admin/index.php?mode=settings=lang=edit...
9.8CVSS8.2AI score0.04383EPSS
SaveExploits1
CVE-2023-34752
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at admin/index.php?mode=settings&page=lang&action=edit...
9.8CVSS9.9AI score0.04383EPSS
SaveExploits1References2
CVE-2023-34752
Affected software: bloofoxCMS v0.5.2.1. Vulnerability: SQL injection via the lid parameter in admin/index.php?mode=settings&page=lang&action=edit. Root cause: unparameterized handling of the lid parameter. Impact: potentially unauthorized data exposure/editing and database manipulation as per sou...
9.8CVSS9.8AI score0.04383EPSS
SaveExploits1References2Affected Software1
20