CVE-2023-34752 - bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at admin/index.php?mode=settings&page=lang&action=edit

Back Back to CVE browser

CRITICAL

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at admin/index.php?mode=settings&page=lang&action=edit

Published Jun 14, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 4.42%

Description

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at admin/index.php?mode=settings&page=lang&action=edit.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-38794
Advisory
https://ndmcyb.hashnode.dev/bloofox-v0521-was-discovered-to-contain-many-sql-injection-vulnerability
ExploitThird Party Advisory
https://www.bloofox.com/
Product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-38794		Advisory
https://ndmcyb.hashnode.dev/bloofox-v0521-was-discovered-to-contain-many-sql-injection-vulnerability		ExploitThird Party Advisory
https://www.bloofox.com/		Product