Skip to main content
← All vulnerabilities
CVE-2008-0427

Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers to read arbitrary files via a ..

Published
Last modified
published
Not listed in CISA KEV
1 on Exploit-DB

Summary

Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

Timeline

  1. Public exploit on Exploit-DB

    EDB-4945

  2. CVE published
  3. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 8

vupen.com

secunia.com

securityfocus.com

Exploit-DB

marc.info

exchange.xforce.ibmcloud.com

bugreport.ir