CVE-2021-44610: SQL Injection
First published: Thu Feb 24 2022(Updated: )
Multiple SQL Injection vulnerabilities exist in bloofoxCMS 0.5.2.1 - 0.5.1 via the (1) URLs, (2) lang_id, (3) tmpl_id, (4) mod_rewrite (5) eta_doctype. (6) meta_charset, (7) default_group, and (8) page group parameters in the settings mode in admin/index.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Bloofox Bloofoxcms | >=0.5.1<=0.5.2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for the SQL Injection vulnerabilities in bloofoxCMS?
The vulnerability ID for the SQL Injection vulnerabilities in bloofoxCMS is CVE-2021-44610.
What is the severity of CVE-2021-44610?
The severity of CVE-2021-44610 is critical.
How do the SQL Injection vulnerabilities in bloofoxCMS impact the software?
The SQL Injection vulnerabilities in bloofoxCMS can allow attackers to execute arbitrary SQL commands and potentially gain unauthorized access to the database.
Are all versions of bloofoxCMS affected by CVE-2021-44610?
No, only versions 0.5.2.1 - 0.5.1 of bloofoxCMS are affected by CVE-2021-44610.
Is there a fix available for the SQL Injection vulnerabilities in bloofoxCMS?
Yes, it is recommended to update bloofoxCMS to a version that includes the fix for CVE-2021-44610.
- collector/nvd-index
- vendor/bloofox
- canonical/bloofox bloofoxcms
- version/bloofox bloofoxcms/0.5.1
- version/bloofox bloofoxcms/0.5.2.1