Skip to content

CVE-2008-5948 Directory traversal vulnerability in index.php in BNCwi 1.04 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the newlanguage parameter.

HighCVSS 7.5 EPSS 2.3%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Directory traversal vulnerability in index.php in BNCwi 1.04 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the newlanguage parameter.

Affected products

ProductAffected versionsFixed in
bncwi <= 1.04 No fix listed
bncwi = 1.03 No fix listed

References

  • 32981 third-party-advisory vendor-advisory
  • 32644 exploit vdb-entry
  • 7345 exploit