Vulnerabilities

TI-2008-00402 CVE-2008-0427 · GHSA-6c8r-rp57-8jc3

Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers…

MEDIUM 40

Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers to read arbitrary files via a ..

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.03678 Published 2008-01-23 No fix listed CWE-22

TI-2006-05791 CVE-2006-6023 · GHSA-3j3f-m8pf-4gxv

PHP remote file inclusion vulnerability in phoo.base.php in Bill Roberts Bloo 1.0 allows…

LOW 36

PHP remote file inclusion vulnerability in phoo.base.php in Bill Roberts Bloo 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the descriptorFileList parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0148 Published 2006-11-21 No fix listed

TI-2006-05787 CVE-2006-6019 · GHSA-hq4c-25j3-78j8

Cross-site scripting (XSS) vulnerability in extensions/googiespell/googlespell_proxy.php…

LOW 33

Cross-site scripting (XSS) vulnerability in extensions/googiespell/googlespell_proxy.php in Bill Roberts Bloo 1.0 allows remote attackers to inject arbitrary web script or HTML via the lang parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01412 Published 2006-11-21 No fix listed

Vulnerabilities

Filters

Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers…

PHP remote file inclusion vulnerability in phoo.base.php in Bill Roberts Bloo 1.0 allows…

Cross-site scripting (XSS) vulnerability in extensions/googiespell/googlespell_proxy.php…