CVE-2008-0427

CVE-2008-0427 describes a directory traversal vulnerability in bloofoxCMS 0.3, where the file.php component permits remote attackers to read arbitrary files by supplying a .. payload in the file parameter. The issue, as documented, is a path traversal flaw in the web application (no further root-...