Security Vulnerabilities - CVEs Published In June 2023
An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-06-14
An issue was discovered htmlcleaner thru = 2.28 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.
CVSS Score
7.5
EPSS Score
0.002
Published
2023-06-14
File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload.
CVSS Score
9.8
EPSS Score
0.261
Published
2023-06-14
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings&page=projects&action=edit.
CVSS Score
9.8
EPSS Score
0.004
Published
2023-06-14
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the gid parameter at admin/index.php?mode=user&page=groups&action=edit.
CVSS Score
9.8
EPSS Score
0.332
Published
2023-06-14
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at admin/index.php?mode=settings&page=lang&action=edit.
CVSS Score
9.8
EPSS Score
0.302
Published
2023-06-14
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the tid parameter at admin/index.php?mode=settings&page=tmpl&action=edit.
CVSS Score
9.8
EPSS Score
0.332
Published
2023-06-14
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the pid parameter at admin/index.php?mode=settings&page=plugins&action=edit.
CVSS Score
9.8
EPSS Score
0.103
Published
2023-06-14
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the userid parameter at admin/index.php?mode=user&action=edit.
CVSS Score
9.8
EPSS Score
0.332
Published
2023-06-14
bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the cid parameter at admin/index.php?mode=settings&page=charset&action=edit.
CVSS Score
9.8
EPSS Score
0.332
Published
2023-06-14