NetSight
low2.7

CVE-2020-35762

bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows attackers to read local files.

Impact

bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows attackers to read local files.

Affected products

VendorProductAffected versions
BloofoxBloofoxcms
Version 0.5.2.1

Weakness classification

References