Skip to contentBloofox Bloofoxcms vulnerabilities
- bloofox bloofoxcmsbloofoxCMS 0.5.2.1 Cross-Site Request Forgery via user addCVE-2020-372416.9 Medium
- bloofox bloofoxcmsBloofoxCMS 0.5.2.1 - 'text' Stored Cross Site ScriptingCVE-2021-479065.1 Medium
- bloofox bloofoxcmsFile Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute...CVE-2020-360829.8 Critical
- bloofox bloofoxcmsbloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at...CVE-2023-347569.8 Critical
- bloofox bloofoxcmsbloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the userid parameter...CVE-2023-347559.8 Critical
- bloofox bloofoxcmsbloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the pid parameter at...CVE-2023-347549.8 Critical
- bloofox bloofoxcmsbloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the tid parameter at...CVE-2023-347539.8 Critical
- bloofox bloofoxcmsbloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at...CVE-2023-347529.8 Critical
- bloofox bloofoxcmsbloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the gid parameter at...CVE-2023-347519.8 Critical
- bloofox bloofoxcmsbloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at...CVE-2023-347509.8 Critical
- bloofox bloofoxcmsbloofox v0.5.2 was discovered to contain a SQL injection vulnerability via the component /index...CVE-2023-295978.8 High
- bloofox bloofoxcmsbloofox v0.5.2 was discovered to contain an arbitrary file deletion vulnerability via the...CVE-2023-278129.1 Critical
- bloofox bloofoxcmsbloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file deletion vulnerability via the...CVE-2023-231516.5 Medium
- bloofox bloofoxcmsbloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file upload vulnerability via /admin...CVE-2022-285288.8 High
- bloofox bloofoxcmsMultiple SQL Injection vulnerabilities exist in bloofoxCMS 0.5.2.1 - 0.5.1 via the (1) URLs, (2)...CVE-2021-446109.8 Critical
- bloofox bloofoxcmsMultiple Cross Site Scripting (XSS) vulnerabilities exists in bloofoxCMS 0.5.2.1 - 0.5.1 via the ...CVE-2021-446085.4 Medium
- bloofox bloofoxcmsbloofoxCMS 0.5.2.1 is infected with a CSRF Attack that leads to an attacker editing any file...CVE-2020-357596.5 Medium
- bloofox bloofoxcmsbloofoxCMS 0.5.2.1 is infected with Unrestricted File Upload that allows attackers to upload...CVE-2020-357609.8 Critical
- bloofox bloofoxcmsbloofoxCMS 0.5.2.1 is infected with XSS that allows remote attackers to execute arbitrary JS/HTML...CVE-2020-357615.4 Medium
- bloofox bloofoxcmsbloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows...CVE-2020-357622.7 Low
- bloofox bloofoxcmsBloofoxCMS 0.5.2.1 allows Reflected Cross-Site Scripting (XSS) vulnerability by inserting a XSS...CVE-2020-361395.4 Medium
- bloofox bloofoxcmsBloofoxCMS 0.5.2.1 allows Cross-Site Request Forgery (CSRF) via 'mode=settings&page=editor', as...CVE-2020-361406.5 Medium
- bloofox bloofoxcmsBloofoxCMS 0.5.2.1 allows Unrestricted File Upload vulnerability via bypass MIME Type validation...CVE-2020-361418.8 High
- bloofox bloofoxcmsBloofoxCMS 0.5.2.1 allows Directory traversal vulnerability by inserting '../' payloads within...CVE-2020-361426.5 Medium
- bloofox bloofoxcmsbloofoxCMS 0.5.2.1 allows admins to upload arbitrary .php files (with "Content-Type: application...CVE-2020-357094.9 Medium
- bloofox bloofoxcmsSQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute...CVE-2010-4870Public exploit7.5 High
- bloofox bloofoxcmsCross-site scripting (XSS) vulnerability in search.5.html in BloofoxCMS 0.3.5 allows remote...CVE-2009-4522Public exploit4.3 Medium
- bloofox bloofoxcmsDirectory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows...CVE-2008-5748Public exploitEPSS 10.4%8.1 High