CVE-2008-5748

HIGH 8.1CVE-2008-5748 · Published 29/12/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
bloofoxcms bloofox	`= 0.3.4`	No fix yet

Description

Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to read arbitrary files via the (1) lang, (2) theme, and (3) module parameters.

References

osvdb.org/51006 · Broken Link
secunia.com/advisories/33135 · Broken Link
securityreason.com/securityalert/4820 · Third Party Advisory
securityfocus.com/bid/33013 · Broken Link
exchange.xforce.ibmcloud.com/vulnerabilities/47611 · Third Party Advisory
exploit-db.com/exploits/7580 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free