CVE-2008-2350 | BDVDB-2026-30740 Detail

Description#

Directory traversal vulnerability in highlight.php in bcoos 1.0.9 through 1.0.13 allows remote attackers to read arbitrary files via (1) .. (dot dot) or (2) C: folder sequences in the file parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://lostmon.blogspot.com/2008/05/bcoos-highlightphp-traversal-file.html
http://www.securityfocus.com/bid/29275
http://secunia.com/advisories/30035
https://exchange.xforce.ibmcloud.com/vulnerabilities/42506

Exploit#

No public exploit known

History#

Version 12008-05-20Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.