Bloo

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Bloo records in CISA KEV

No Bloo vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bloo 2 records LOW Bloofoxcms 1 record MEDIUM

Records

2 records in Bloo · all components

TI-2006-05791 CVE-2006-6023 · GHSA-3j3f-m8pf-4gxv

PHP remote file inclusion vulnerability in phoo.base.php in Bill Roberts Bloo 1.0 allows…

LOW 36

PHP remote file inclusion vulnerability in phoo.base.php in Bill Roberts Bloo 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the descriptorFileList parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0148 Published 2006-11-21 No fix listed

TI-2006-05787 CVE-2006-6019 · GHSA-hq4c-25j3-78j8

Cross-site scripting (XSS) vulnerability in extensions/googiespell/googlespell_proxy.php…

LOW 33

Cross-site scripting (XSS) vulnerability in extensions/googiespell/googlespell_proxy.php in Bill Roberts Bloo 1.0 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01412 Published 2006-11-21 No fix listed

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0