CVE-2020-35709

概要

参考情報

• alexlang24/bloofoxCMS · Exploit

bloofoxcms のその他の脆弱性

• CVE-2020-36082緊急 9.8File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via craft…
• CVE-2023-34756緊急 9.8bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings&page=charset…
• CVE-2023-34755緊急 9.8bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the userid parameter at admin/index.php?mode=user&action=edit.
• CVE-2023-34754緊急 9.8bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the pid parameter at admin/index.php?mode=settings&page=plugins…
• CVE-2023-34753緊急 9.8bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the tid parameter at admin/index.php?mode=settings&page=tmpl&ac…