CVE-2008-2350 Directory traversal vulnerability in highlight.php in bcoos 1.0.9 through 1.0.13 allows remote attackers to read arbitrary files via (1) .. (dot dot) or (2) C: folder sequences in the file parameter.
MediumCVSS 5.0
EPSS 2.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in highlight.php in bcoos 1.0.9 through 1.0.13 allows remote attackers to read arbitrary files via (1) .. (dot dot) or (2) C: folder sequences in the file parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bcoos | = 1.0.9 | No fix listed |
| bcoos | = 1.0.10 | No fix listed |
| bcoos | = 1.0.11 | No fix listed |
| bcoos | = 1.0.12 | No fix listed |
| bcoos | = 1.0.13 | No fix listed |
References
- lostmon.blogspot.com exploit
- 30035 third-party-advisory vendor-advisory
- 29275 exploit vdb-entry
- bcoos-highlight-directory-traversal(42506) vdb-entry