CVE-2023-34754

CriticalCVSS 9.8

Published: 14/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

3.45%

87th percentile - higher than 87% of all known CVEs

Summary

Version 0.5.2.1 of bloofox was found to contain a SQL injection vulnerability via the pid parameter in admin/index.php?mode=settings&page=plugins&action=edit.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database and exposure of sensitive information.

Recommendation

It is recommended to update to the latest version of bloofox and to validate and secure input parameters in the application.

Original NVD description (English source)

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the pid parameter at admin/index.php?mode=settings&page=plugins&action=edit.