Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: BloofoxCMS Clear all filters
TI-2021-22520 CVE-2021-47906 · GHSA-7x4x-5cr5-pcpx

BloofoxCMS 0.5.2.1 - 'text' Stored Cross Site Scripting

Priority MEDIUM 56

BloofoxCMS 0.5.2.1 contains a stored cross-site scripting vulnerability in the articles text parameter that allows authenticated attackers to inject malicious scripts.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.0023 Published 2026-01-23 No fix listed CWE-79
TI-2008-00403 CVE-2008-0428 · GHSA-92hw-2m7p-xj5c

Multiple SQL injection vulnerabilities in the login function in…

Priority LOW 36

Multiple SQL injection vulnerabilities in the login function in system/class_permissions.php in bloofoxCMS 0.3 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to ad…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01681 Published 2008-01-23 No fix listed CWE-89