ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

Vulnerability managementShadowTrackr CVSS score

1 result for “CVE-2020-36140”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-36140
Published
2021-06-04
CVSS:
6.5
ShadowTrackr CVSS:
5.0
Summary:
BloofoxCMS 0.5.2.1 allows Cross-Site Request Forgery (CSRF) via 'mode=settings&page=editor', as demonstrated by use of 'mode=settings&page=editor' to change any file content (Locally/Remotely).