SQL Injection Vulnerability in BloofoxCMS by Bloofox
CVE-2010-4870
Currently unrated
Key Information:
- Vendor
Bloofox
- Status
- Vendor
- CVE Published:
- 7 October 2011
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2010-4870?
The vulnerability in BloofoxCMS 0.3.5 involves an SQL injection flaw within the index.php file. This weakness allows remote attackers to manipulate the database by executing arbitrary SQL commands through the 'gender' parameter, leading to potential unauthorized data exposure and modification.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.