CVE-2023-34752

CriticalCVSS 9.8

Published: 14/06/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

4.38%

90th percentile - higher than 90% of all known CVEs

Summary

A SQL injection vulnerability was discovered in bloofox v0.5.2.1 via the lid parameter in admin/index.php. An attacker can exploit this flaw to manipulate database queries.

Risk Assessment

The risk involves unauthorized database access, potentially leading to leakage, modification, or deletion of sensitive organizational data.

Recommendation

Immediately update bloofox to the latest available version and implement input validation and sanitization for the lid parameter.

Original NVD description (English source)

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at admin/index.php?mode=settings&page=lang&action=edit.