Vulnerabilities

TI-2008-01491 CVE-2008-1557 · GHSA-fmwx-3365-q5x9

BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct…

LOW 28

BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct request to system/actionspages/_b/contentFiles/gBphpInfo.php, which calls the phpinfo function.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02696 Published 2008-03-31 No fix listed CWE-200

TI-2008-01490 CVE-2008-1556 · GHSA-xrfw-635c-5mwq

Multiple cross-site scripting (XSS) vulnerabilities in BolinOS 4.6.1 allow remote…

LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in BolinOS 4.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to (a) system/actionspages/_b/contentFiles/gBImageViewer.php, (…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01803 Published 2008-03-31 No fix listed CWE-79

TI-2008-01489 CVE-2008-1555 · GHSA-pcvm-fprq-5ph9

Directory traversal vulnerability in system/_b/contentFiles/gbincluder.php in BolinOS…

LOW 34

Directory traversal vulnerability in system/_b/contentFiles/gbincluder.php in BolinOS 4.6.1 allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02297 Published 2008-03-31 No fix listed CWE-22

TI-2006-04679 CVE-2006-4851 · GHSA-4mjq-cg5g-vh2h

PHP remote file inclusion vulnerability in system/_b/contentFiles/gBHTMLEditor.php in…

LOW 37

PHP remote file inclusion vulnerability in system/_b/contentFiles/gBHTMLEditor.php in BolinOS 4.5.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gBRootPath parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02302 Published 2006-09-19 No fix listed

TI-2006-04678 CVE-2006-4850 · GHSA-ppvw-48vv-rv4w

PHP remote file inclusion vulnerability in system/_b/contentFiles/gBIndex.php in BolinOS…