CVE-2010-4870

Description

References

• packetstormsecurity.org/1010-exploits/bloofoxcms-sql.txt · Exploit
• securityreason.com/securityalert/8427
• exploit-db.com/exploits/15328 · Exploit
• htbridge.ch/advisory/sql_injection_in_bloofoxcms_registration_plugin.html · Exploit
• securityfocus.com/archive/1/514479/100/100/threaded
• securityfocus.com/bid/44464 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/62810

Weitere Schwachstellen in bloofoxcms

• CVE-2020-36082KRITISCH 9.8File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via craft…
• CVE-2023-34756KRITISCH 9.8bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings&page=charset…
• CVE-2023-34755KRITISCH 9.8bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the userid parameter at admin/index.php?mode=user&action=edit.
• CVE-2023-34754KRITISCH 9.8bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the pid parameter at admin/index.php?mode=settings&page=plugins…
• CVE-2023-34753KRITISCH 9.8bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the tid parameter at admin/index.php?mode=settings&page=tmpl&ac…