Vulnerability Details CVE-2008-5748
Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to read arbitrary files via the (1) lang, (2) theme, and (3) module parameters.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.076
EPSS Ranking 91.4%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 4.3
References
- http://osvdb.org/51006
- http://secunia.com/advisories/33135
- http://securityreason.com/securityalert/4820
- http://www.securityfocus.com/bid/33013
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47611
- https://www.exploit-db.com/exploits/7580
- http://osvdb.org/51006
- http://secunia.com/advisories/33135
- http://securityreason.com/securityalert/4820
- http://www.securityfocus.com/bid/33013
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47611
- https://www.exploit-db.com/exploits/7580
Products affected by CVE-2008-5748
-
cpe:2.3:a:bloofox:bloofoxcms:0.3.4