High severity8.1NVD Advisory· Published Dec 29, 2008· Updated Jun 16, 2026
CVE-2008-5748
CVE-2008-5748
Description
Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to read arbitrary files via the (1) lang, (2) theme, and (3) module parameters.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:bloofox:bloofoxcms:0.3.4:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:bloofox:bloofoxcms:0.3.4:*:*:*:*:*:*:*
- (no CPE)range: <0.3.4
Patches
Vulnerability mechanics
References
6- www.securityfocus.com/bid/33013nvdBroken LinkExploitThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/7580nvdExploitThird Party AdvisoryVDB Entry
- secunia.com/advisories/33135nvdBroken LinkVendor Advisory
- securityreason.com/securityalert/4820nvdThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/47611nvdThird Party AdvisoryVDB Entry
- osvdb.org/51006nvdBroken Link
News mentions
0No linked articles in our index yet.