Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Informations
NameCVE-2008-5748First vendor Publication2008-12-29
VendorCveLast vendor Modification2017-09-28

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:P/I:N/A:N)
Cvss Base Score4.3Attack RangeNetwork
Cvss Impact Score2.9Attack ComplexityMedium
Cvss Expoit Score8.6AuthenticationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to read arbitrary files via the (1) lang, (2) theme, and (3) module parameters.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5748

CAPEC : Common Attack Pattern Enumeration & Classification

idName
CAPEC-13Subverting Environment Variable Values
CAPEC-23File System Function Injection, Content Based
CAPEC-64Using Slashes and URL Encoding Combined to Bypass Validation Logic
CAPEC-72URL Encoding
CAPEC-76Manipulating Input to File System Calls
CAPEC-78Using Escaped Slashes in Alternate Encoding
CAPEC-79Using Slashes in Alternate Encoding
CAPEC-80Using UTF-8 Encoding to Bypass Validation Logic
CAPEC-139Relative Path Traversal

CWE : Common Weakness Enumeration

%idName
100 %CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE/SANS Top 25)

CPE : Common Platform Enumeration

TypeDescriptionCount
Application1

Open Source Vulnerability Database (OSVDB)

idDescription
51006bloofoxCMS plugins/spaw2/dialogs/dialog.php Multiple Parameter Traversal Loca...

Sources (Detail)

SourceUrl
BID http://www.securityfocus.com/bid/33013
EXPLOIT-DB https://www.exploit-db.com/exploits/7580
SREASON http://securityreason.com/securityalert/4820
XF https://exchange.xforce.ibmcloud.com/vulnerabilities/47611

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
DateInformations
2017-09-29 09:23:53
  • Multiple Updates
2017-08-08 09:24:36
  • Multiple Updates
2016-06-28 17:23:43
  • Multiple Updates
2016-04-26 18:10:47
  • Multiple Updates
2013-05-11 00:33:45
  • Multiple Updates