Lucene search

K

Bloofoxcms Security Vulnerabilities

cve
cve

CVE-2007-2311

PHP remote file inclusion vulnerability in install/index.php in BlooFoxCMS 0.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the content_php parameter. NOTE: this issue has been disputed by a reliable third party, stating that content_php is initialized before...

7.5AI Score

0.011EPSS

2007-04-26 09:19 PM
22
cve
cve

CVE-2008-0428

Multiple SQL injection vulnerabilities in the login function in system/class_permissions.php in bloofoxCMS 0.3 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to...

8.7AI Score

0.003EPSS

2008-01-23 10:00 PM
16
cve
cve

CVE-2007-2310

Cross-site scripting (XSS) vulnerability in plugins/spaw/img_popup.php in BloofoxCMS 0.2.2 allows remote attackers to inject arbitrary web script or HTML via the img_url...

5.7AI Score

0.003EPSS

2007-04-26 09:19 PM
20