CVE-2008-5993: Barcodephp Barcodegen 1d

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in image.php in Barcode Generator 1D (barcodegen) 2.0.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the code parameter.

Affected products

• Barcodephp Barcodegen 1d: up to and including 2.0.0; version 1.2.4 only; version 1.3.0 only

Published 2009-01-28. Last modified 2026-06-16.