Bloofoxcms Security Vulnerabilities and Issues — Bloofoxcms CVE List

Lucene search

BloofoxBloofoxcms

3 matches found

CVE•added 2020/12/25 7:15 p.m.•288 views

CVE-2020-35709

bloofoxCMS 0.5.2.1 allows admins to upload arbitrary .php files (with "Content-Type: application/octet-stream") to ../media/images/ via the admin/index.php?mode=tools&page=upload URI, aka directory traversal.

4.9CVSS5.2AI score0.00753EPSS

CVE•added 2009/12/31 7:30 p.m.•34 views

CVE-2009-4522

Cross-site scripting (XSS) vulnerability in search.5.html in BloofoxCMS 0.3.5 allows remote attackers to inject arbitrary web script or HTML via the search parameter to index.php. NOTE: some of these details are obtained from third party information.

4.3CVSS5.7AI score0.01601EPSS

CVE•added 2021/06/16 4:15 p.m.•32 views

CVE-2020-35762

bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows attackers to read local files.

4CVSS3.7AI score0.00258EPSS