CVE-2023-34752

Summary

CVE-2023-34752 is a recently disclosed SQL injection vulnerability affecting bloofox v0.5.2.1. An attacker can exploit this flaw by manipulating the lid parameter in the URL admin/index.php?mode=settings&page=lang&action=edit. Successful exploitation grants unauthorized access to the system's database, potentially leading to data theft or modification. Users are strongly encouraged to update their bloofox installations as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.