PT-2008-6798 · Bloofox · Bloofoxcms

Fuzion · Published 2008-12-29 · Updated 2024-01-26 · CVE-2008-5748

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions BloofoxCMS version 0.3.4

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved via the lang, theme, and module parameters in the plugins/spaw2/dialogs/dialog.php file.

Recommendations For BloofoxCMS version 0.3.4, restrict access to the vulnerable parameters lang, theme, and module in the dialog.php file to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-5748

Affected Products

Bloofoxcms

References · 8

• 🔥 http://securityfocus.com/bid/33013 · Exploit
• 🔥 https://exploit-db.com/exploits/7580 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5748 · Security Note
• http://secunia.com/advisories/33135 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47611 · Note
• http://osvdb.org/51006 · Note
• http://securityreason.com/securityalert/4820 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5748 · Note