Bloofox vulnerabilities

Products

• Bloofoxcms 28

Newest

• bloofox bloofoxcms bloofoxCMS 0.5.2.1 Cross-Site Request Forgery via user add CVE-2020-37241 6.9 MediumMay 16, 2026
• bloofox bloofoxcms BloofoxCMS 0.5.2.1 - 'text' Stored Cross Site Scripting CVE-2021-47906 5.1 MediumJanuary 23, 2026
• bloofox bloofoxcms File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute... CVE-2020-36082 9.8 CriticalAugust 11, 2023
• bloofox bloofoxcms bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at... CVE-2023-34756 9.8 CriticalJune 14, 2023
• bloofox bloofoxcms bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the userid parameter... CVE-2023-34755 9.8 CriticalJune 14, 2023
• bloofox bloofoxcms bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the pid parameter at... CVE-2023-34754 9.8 CriticalJune 14, 2023
• bloofox bloofoxcms bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the tid parameter at... CVE-2023-34753 9.8 CriticalJune 14, 2023
• bloofox bloofoxcms bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at... CVE-2023-34752 9.8 CriticalJune 14, 2023
• bloofox bloofoxcms bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the gid parameter at... CVE-2023-34751 9.8 CriticalJune 14, 2023
• bloofox bloofoxcms bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at... CVE-2023-34750 9.8 CriticalJune 14, 2023
• bloofox bloofoxcms bloofox v0.5.2 was discovered to contain a SQL injection vulnerability via the component /index... CVE-2023-29597 8.8 HighApril 13, 2023
• bloofox bloofoxcms bloofox v0.5.2 was discovered to contain an arbitrary file deletion vulnerability via the... CVE-2023-27812 9.1 CriticalApril 13, 2023
• bloofox bloofoxcms bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file deletion vulnerability via the... CVE-2023-23151 6.5 MediumJanuary 25, 2023
• bloofox bloofoxcms bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file upload vulnerability via /admin... CVE-2022-28528 8.8 HighApril 26, 2022
• bloofox bloofoxcms Multiple SQL Injection vulnerabilities exist in bloofoxCMS 0.5.2.1 - 0.5.1 via the (1) URLs, (2)... CVE-2021-44610 9.8 CriticalFebruary 23, 2022
• bloofox bloofoxcms Multiple Cross Site Scripting (XSS) vulnerabilities exists in bloofoxCMS 0.5.2.1 - 0.5.1 via the ... CVE-2021-44608 5.4 MediumFebruary 23, 2022
• bloofox bloofoxcms bloofoxCMS 0.5.2.1 is infected with a CSRF Attack that leads to an attacker editing any file... CVE-2020-35759 6.5 MediumJune 16, 2021
• bloofox bloofoxcms bloofoxCMS 0.5.2.1 is infected with Unrestricted File Upload that allows attackers to upload... CVE-2020-35760 9.8 CriticalJune 16, 2021
• bloofox bloofoxcms bloofoxCMS 0.5.2.1 is infected with XSS that allows remote attackers to execute arbitrary JS/HTML... CVE-2020-35761 5.4 MediumJune 16, 2021
• bloofox bloofoxcms bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows... CVE-2020-35762 2.7 LowJune 16, 2021
• bloofox bloofoxcms BloofoxCMS 0.5.2.1 allows Reflected Cross-Site Scripting (XSS) vulnerability by inserting a XSS... CVE-2020-36139 5.4 MediumJune 4, 2021
• bloofox bloofoxcms BloofoxCMS 0.5.2.1 allows Cross-Site Request Forgery (CSRF) via 'mode=settings&page=editor', as... CVE-2020-36140 6.5 MediumJune 4, 2021
• bloofox bloofoxcms BloofoxCMS 0.5.2.1 allows Unrestricted File Upload vulnerability via bypass MIME Type validation... CVE-2020-36141 8.8 HighJune 4, 2021
• bloofox bloofoxcms BloofoxCMS 0.5.2.1 allows Directory traversal vulnerability by inserting '../' payloads within... CVE-2020-36142 6.5 MediumJune 4, 2021
• bloofox bloofoxcms bloofoxCMS 0.5.2.1 allows admins to upload arbitrary .php files (with "Content-Type: application... CVE-2020-35709 4.9 MediumDecember 25, 2020
• bloofox bloofoxcms SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute... CVE-2010-4870 Public exploit 7.5 HighOctober 7, 2011
• bloofox bloofoxcms Cross-site scripting (XSS) vulnerability in search.5.html in BloofoxCMS 0.3.5 allows remote... CVE-2009-4522 Public exploit 4.3 MediumDecember 31, 2009
• bloofox bloofoxcms Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows... CVE-2008-5748 Public exploit EPSS 10.4% 8.1 HighDecember 29, 2008