VYPR
← All advisories
Unrated severityNVD Advisory· Published May 20, 2008· Updated Jun 16, 2026

CVE-2008-2350

CVE-2008-2350

Description

Directory traversal vulnerability in highlight.php in bcoos 1.0.9 through 1.0.13 allows remote attackers to read arbitrary files via (1) .. (dot dot) or (2) C: folder sequences in the file parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Bcoos/Bcoos6 versions
    cpe:2.3:a:bcoos:bcoos:1.0.10:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:bcoos:bcoos:1.0.10:*:*:*:*:*:*:*
    • cpe:2.3:a:bcoos:bcoos:1.0.11:*:*:*:*:*:*:*
    • cpe:2.3:a:bcoos:bcoos:1.0.12:*:*:*:*:*:*:*
    • cpe:2.3:a:bcoos:bcoos:1.0.13:*:*:*:*:*:*:*
    • cpe:2.3:a:bcoos:bcoos:1.0.9:*:*:*:*:*:*:*
    • (no CPE)range: 1.0.9 - 1.0.13

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.