← All advisories

Critical severity9.8NVD Advisory· Published Jun 14, 2023· Updated Jun 17, 2026

CVE-2023-34755

CVE-2023-34755

Description

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the userid parameter at admin/index.php?mode=user&action=edit.

Affected products

3

Bloofoxcms/Bloofoxcms3 versions
cpe:2.3:a:bloofox:bloofoxcms:0.5.2.1:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:bloofox:bloofoxcms:0.5.2.1:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =0.5.2.1

Patches

Vulnerability mechanics

References

1

ndmcyb.hashnode.dev/bloofox-v0521-was-discovered-to-contain-many-sql-injection-vulnerabilitynvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.