CVE-2008-5748

Опубликовано: 29 дек. 2008

Источник: nvd

CVSS3: 8.1

CVSS2: 4.3

EPSS Низкий

Описание

Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to read arbitrary files via the (1) lang, (2) theme, and (3) module parameters.

Ссылки

http://osvdb.org/51006
Broken Link
http://secunia.com/advisories/33135
Broken Link
Vendor Advisory
http://securityreason.com/securityalert/4820
Third Party Advisory
http://www.securityfocus.com/bid/33013
Broken Link
Exploit
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/47611
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/7580
Exploit
Third Party Advisory
VDB Entry
http://osvdb.org/51006
Broken Link
http://secunia.com/advisories/33135
Broken Link
Vendor Advisory
http://securityreason.com/securityalert/4820
Third Party Advisory
http://www.securityfocus.com/bid/33013
Broken Link
Exploit
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/47611
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/7580
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:bloofox:bloofoxcms:0.3.4:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.08433

Низкий

8.1 High

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-q72h-v4jg-pwvv