CVE-2008-2350: Bcoos

Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in highlight.php in bcoos 1.0.9 through 1.0.13 allows remote attackers to read arbitrary files via (1) .. (dot dot) or (2) C: folder sequences in the file parameter.

Affected products

• Bcoos Bcoos: version 1.0.9 only; version 1.0.10 only; version 1.0.11 only; version 1.0.12 only; version 1.0.13 only

Published 2008-05-20. Last modified 2026-06-16.