CVE-2010-4870

概要

参考情報

• packetstormsecurity.org/1010-exploits/bloofoxcms-sql.txt · Exploit
• securityreason.com/securityalert/8427
• exploit-db.com/exploits/15328 · Exploit
• htbridge.ch/advisory/sql_injection_in_bloofoxcms_registration_plugin.html · Exploit
• securityfocus.com/archive/1/514479/100/100/threaded
• securityfocus.com/bid/44464 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/62810

bloofoxcms のその他の脆弱性

• CVE-2020-36082緊急 9.8File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via craft…
• CVE-2023-34756緊急 9.8bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings&page=charset…
• CVE-2023-34755緊急 9.8bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the userid parameter at admin/index.php?mode=user&action=edit.
• CVE-2023-34754緊急 9.8bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the pid parameter at admin/index.php?mode=settings&page=plugins…
• CVE-2023-34753緊急 9.8bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the tid parameter at admin/index.php?mode=settings&page=tmpl&ac…