CVE-2023-34750

CriticalCVSS 9.8

Published: 14/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.01%

58th percentile - higher than 58% of all known CVEs

Summary

Version 0.5.2.1 of bloofox was found to contain a SQL injection vulnerability via the cid parameter in admin/index.php?mode=settings&page=projects&action=edit.

Risk Assessment

This vulnerability could allow attackers to execute unauthorized queries against the database, potentially leading to the disclosure of sensitive information or data manipulation.

Recommendation

It is recommended to update the bloofox application to the latest version and to validate and sanitize input data to prevent SQL injection attacks.

Original NVD description (English source)

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings&page=projects&action=edit.