CVE-2008-0427: Path Traversal
Published Jan 23, 2008
·Updated
Directory traversal vulnerability in file.php in bloofoxCMS 0.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
Affected Software
1 affected component
Bloo bloofoxCMS=0.3
Event History
Jan 23, 2008
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-0427?
CVE-2008-0427 has been classified as a medium severity vulnerability.
2
How does CVE-2008-0427 allow exploitation?
CVE-2008-0427 allows exploitation through directory traversal, enabling attackers to access arbitrary files via manipulated input.
3
What systems are affected by CVE-2008-0427?
CVE-2008-0427 affects BloofoxCMS version 0.3.
4
How can I fix CVE-2008-0427?
To fix CVE-2008-0427, implement input validation to sanitize the file parameter and prevent directory traversal.
5
What type of attack does CVE-2008-0427 enable?
CVE-2008-0427 enables remote file access attacks, allowing an attacker to read sensitive information from the server.