Bolinos

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Bolinos records in CISA KEV

No Bolinos vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bolinos 4 records LOW Blinos 1 record LOW

Records

5 records

TI-2006-04679 CVE-2006-4851 · GHSA-4mjq-cg5g-vh2h

PHP remote file inclusion vulnerability in system/_b/contentFiles/gBHTMLEditor.php in…

LOW 37

PHP remote file inclusion vulnerability in system/_b/contentFiles/gBHTMLEditor.php in BolinOS 4.5.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gBRootPath parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02302 Published 2006-09-19 No fix listed

TI-2008-01489 CVE-2008-1555 · GHSA-pcvm-fprq-5ph9

Directory traversal vulnerability in system/_b/contentFiles/gbincluder.php in BolinOS…

LOW 34

Directory traversal vulnerability in system/_b/contentFiles/gbincluder.php in BolinOS 4.6.1 allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02297 Published 2008-03-31 No fix listed CWE-22

TI-2006-04678 CVE-2006-4850 · GHSA-ppvw-48vv-rv4w

PHP remote file inclusion vulnerability in system/_b/contentFiles/gBIndex.php in BolinOS…

LOW 34

PHP remote file inclusion vulnerability in system/_b/contentFiles/gBIndex.php in BolinOS 4.5.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gBRootPath parameter.

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.07873 Published 2006-09-19 No fix listed

TI-2008-01491 CVE-2008-1557 · GHSA-fmwx-3365-q5x9

BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct…

LOW 28

BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct request to system/actionspages/_b/contentFiles/gBphpInfo.php, which calls the phpinfo function.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02696 Published 2008-03-31 No fix listed CWE-200

TI-2008-01490 CVE-2008-1556 · GHSA-xrfw-635c-5mwq

Multiple cross-site scripting (XSS) vulnerabilities in BolinOS 4.6.1 allow remote…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in BolinOS 4.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to (a) system/actionspages/_b/contentFiles/gBImageViewer.php, (…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01803 Published 2008-03-31 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	4
Low	0
No CVSS	0