CVE-2023-23151 - bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file deletion vulnerability via the component /include/inc_content_media.php

MEDIUM

bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file deletion vulnerability via the component /include/inc_content_media.php

Published Jan 25, 2023

6.5

MEDIUM

CVSS 3.1

EPSS 1.04%

bloofoxCMS v0.5.2.1 was discovered to contain an arbitrary file deletion vulnerability via the component /include/inc_content_media.php.

No remediation recorded yet.

Weaknesses (1)

CWE-404

Improper Resource Shutdown or Release

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-27251		Advisory
https://github.com/alexlang24/bloofoxCMS/issues/17		ExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jan 25, 2023

Updated Mar 28, 2025

Reserved Jan 11, 2023

Updated Mar 28, 2025

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Jan 25, 2023

Updated Mar 28, 2025

Exploited since n/a