Vulnerability Details CVE-2008-5748
Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to read arbitrary files via the (1) lang, (2) theme, and (3) module parameters.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.091
EPSS Ranking 92.6%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 4.3
References
- http://osvdb.org/51006
- http://secunia.com/advisories/33135
- http://securityreason.com/securityalert/4820
- http://www.securityfocus.com/bid/33013
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47611
- https://www.exploit-db.com/exploits/7580
- http://osvdb.org/51006
- http://secunia.com/advisories/33135
- http://securityreason.com/securityalert/4820
- http://www.securityfocus.com/bid/33013
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47611
- https://www.exploit-db.com/exploits/7580
Products affected by CVE-2008-5748
-
cpe:2.3:a:bloofox:bloofoxcms:0.3.4