CVE-2008-4707: Directory traversal vulnerability in index.php in BbZL.PhP 0.92 allows remote attackers to access unauthori...

Security readout for executives and security teams

CVE-2008-4707 is a directory traversal issue in BbZL.PhP 0.92. A remote attacker could use the lien_2 parameter in index.php to access unauthorized directories. The sources do not provide CVSS scoring, confirmed active exploitation, or a vendor fix. Exposure is likely limited to systems still running BbZL.PhP 0.92, especially if index.php is reachable from the internet. The structured affected-product data is incomplete, so confirm by inventory rather than assuming broad exposure. Treat this as a targeted cleanup item, not a confirmed emergency. Prioritize internet-facing legacy PHP sites because the vulnerability can expose unauthorized directories and has a public exploit reference, but evidence of active exploitation is absent. Mitigation focus: Inventory for BbZL.PhP 0.92 installations and exposed index.php routes.; Check vendor or project guidance for a supported fix or replacement.; Restrict public access to affected installations where removal is not immediate..

Prepared

Jun 28, 2026, 11:59 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.