SQL Injection Vulnerability in Bloofox Product by Bloofox
CVE-2023-34752

9.8CRITICAL

Key Information:

Vendor

Bloofox

Status
Bloofoxcms
Vendor
CVE Published:
14 June 2023

What is CVE-2023-34752?

A SQL injection vulnerability has been identified in Bloofox version 0.5.2.1, specifically via the lid parameter on the admin settings page. This type of vulnerability allows attackers to manipulate SQL queries, potentially leading to unauthorized access to sensitive data or compromising the application’s integrity. It is crucial for users of Bloofox to update to a secure version and implement appropriate security measures to mitigate risks associated with SQL injection attacks.

References

https://www.bloofox.com/
https://ndmcyb.hashnode.dev/bloofox-v0521-was-discovered-...
http://bloofoxcms.com

EPSS Score

30% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.