CVE-2023-34752
CRITICAL NUCLEIbloofoxcms v0.5.2.1 - SQL Injection via lid Parameter
Title source: llmExploitation Summary
CVE-2023-34752 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.
Description
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at admin/index.php?mode=settings&page=lang&action=edit.
Nuclei Templates (1)
bloofoxCMS v0.5.2.1 - SQL Injection
CRITICALVERIFIEDby theamanrawat
FOFA:
Powered by bloofoxCMS || powered by bloofoxcms
References (3)
Core 3
Core References
Product
http://bloofoxcms.com
Exploit, Third Party Advisory
https://ndmcyb.hashnode.dev/bloofox-v0521-was-discovered-to-contain-many-sql-injection-vulnerability
Product
https://www.bloofox.com/
Scores
CVSS v3
9.8
EPSS
0.0546
EPSS Percentile
91.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
total
Details
CWE
CWE-89
Status
published
Products (1)
bloofox/bloofoxcms
0.5.2.1
Published
Jun 14, 2023
Tracked Since
Feb 18, 2026