Show filters
19 Total Results
Displaying 1-10 of 19
Sort by:
Attacker Value
Unknown
CVE-2020-36082
Disclosure Date: August 11, 2023 (last updated October 08, 2023)
File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via crafted webshell file to upload module.
0
Attacker Value
Unknown
CVE-2023-34756
Disclosure Date: June 14, 2023 (last updated October 08, 2023)
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings&page=charset&action=edit.
0
Attacker Value
Unknown
CVE-2023-34755
Disclosure Date: June 14, 2023 (last updated October 08, 2023)
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the userid parameter at admin/index.php?mode=user&action=edit.
0
Attacker Value
Unknown
CVE-2023-34754
Disclosure Date: June 14, 2023 (last updated October 08, 2023)
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the pid parameter at admin/index.php?mode=settings&page=plugins&action=edit.
0
Attacker Value
Unknown
CVE-2023-34753
Disclosure Date: June 14, 2023 (last updated October 08, 2023)
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the tid parameter at admin/index.php?mode=settings&page=tmpl&action=edit.
0
Attacker Value
Unknown
CVE-2023-34752
Disclosure Date: June 14, 2023 (last updated October 08, 2023)
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at admin/index.php?mode=settings&page=lang&action=edit.
0
Attacker Value
Unknown
CVE-2023-34751
Disclosure Date: June 14, 2023 (last updated October 08, 2023)
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the gid parameter at admin/index.php?mode=user&page=groups&action=edit.
0
Attacker Value
Unknown
CVE-2023-34750
Disclosure Date: June 14, 2023 (last updated October 08, 2023)
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings&page=projects&action=edit.
0
Attacker Value
Unknown
CVE-2023-23151
Disclosure Date: January 26, 2023 (last updated October 08, 2023)
bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file deletion vulnerability via the component /include/inc_content_media.php.
0
Attacker Value
Unknown
CVE-2022-28528
Disclosure Date: April 26, 2022 (last updated October 07, 2023)
bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file upload vulnerability via /admin/index.php?mode=content&page=media&action=edit.
0
