CVE-2023-34756

CriticalCVSS 9.8

Published: 14/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

4.23%

90th percentile - higher than 90% of all known CVEs

Summary

Version 0.5.2.1 of the bloofox application was found to contain a SQL injection vulnerability via the cid parameter in admin/index.php?mode=settings&page=charset&action=edit.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database and exposure of sensitive information.

Recommendation

It is recommended to update the bloofox application to the latest version and secure input parameters against SQL injections.

Original NVD description (English source)

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings&page=charset&action=edit.