Vulnerabilities

TI-2008-00403 CVE-2008-0428 · GHSA-92hw-2m7p-xj5c

Multiple SQL injection vulnerabilities in the login function in…

LOW 36

Multiple SQL injection vulnerabilities in the login function in system/class_permissions.php in bloofoxCMS 0.3 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to ad…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01681 Published 2008-01-23 No fix listed CWE-89

TI-2007-02229 CVE-2007-2311 · GHSA-2438-c5fw-q6wq

PHP remote file inclusion vulnerability in install/index.php in BlooFoxCMS 0.2.2 allows…

LOW 36

PHP remote file inclusion vulnerability in install/index.php in BlooFoxCMS 0.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the content_php parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01356 Published 2007-04-26 No fix listed

TI-2007-02228 CVE-2007-2310 · GHSA-gpwx-5qfc-8xgj

Cross-site scripting (XSS) vulnerability in plugins/spaw/img_popup.php in BloofoxCMS…

LOW 23

Cross-site scripting (XSS) vulnerability in plugins/spaw/img_popup.php in BloofoxCMS 0.2.2 allows remote attackers to inject arbitrary web script or HTML via the img_url parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01523 Published 2007-04-26 No fix listed

Vulnerabilities

Filters

Multiple SQL injection vulnerabilities in the login function in…

PHP remote file inclusion vulnerability in install/index.php in BlooFoxCMS 0.2.2 allows…

Cross-site scripting (XSS) vulnerability in plugins/spaw/img_popup.php in BloofoxCMS…