bloofox v0.5.2.1 vulnerabilities
8 known CVE vulnerabilities in bloofox v0.5.2.1, translated and rated.
- CVE-2023-34756Critical
Version 0.5.2.1 of the bloofox application was found to contain a SQL injection vulnerability via the cid parameter in admin/index.php?mode=settings&page=charset&action=edit.
- CVE-2023-34755Critical
Version 0.5.2.1 of the bloofox application was found to contain a SQL injection vulnerability via the userid parameter in admin/index.php?mode=user&action=edit.
- CVE-2023-34754Critical
Version 0.5.2.1 of bloofox was found to contain a SQL injection vulnerability via the pid parameter in admin/index.php?mode=settings&page=plugins&action=edit.
- CVE-2023-34753Critical
Version 0.5.2.1 of bloofox was found to contain a SQL injection vulnerability via the tid parameter in admin/index.php?mode=settings&page=tmpl&action=edit.
- CVE-2023-34752Critical
A SQL injection vulnerability was discovered in bloofox v0.5.2.1 via the lid parameter in admin/index.php. An attacker can exploit this flaw to manipulate database queries.
- CVE-2023-34751Critical
Version 0.5.2.1 of bloofox was found to contain a SQL injection vulnerability via the gid parameter in admin/index.php?mode=user&page=groups&action=edit.
- CVE-2023-34750Critical
Version 0.5.2.1 of bloofox was found to contain a SQL injection vulnerability via the cid parameter in admin/index.php?mode=settings&page=projects&action=edit.
- CVE-2023-27812Critical
In bloofox v0.5.2, an arbitrary file deletion vulnerability was discovered via the delete_file() function. An attacker can exploit this flaw to delete critical system files.