bloofoxCMS File Upload Vulnerability (CNVD-2023-64046)

bloofoxCMS is Bloofox (bloofoxCMS) individual developers of a Php-based text content management system. A file upload vulnerability exists in bloofoxCMS version 0.5.2.1, which stems from the application’s lack of valid validation of uploaded files. The vulnerability can be exploited to execute arbitrary code and escalate privileges via a well-designed webshell file upload module.