TOTOLINK X15 Router DoS

The vulnerability of the built-in boa server /boafrm/formRoute of the TOTOLINK X15 router software lies in the fact that the operation exceeds the buffer boundaries in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious actor to cause service failures...

TOTOLINK EX1200T Router boa server Data Compromise

The vulnerability of the built-in boa server /boafrm/formSaveConfig of the TOTOLINK EX1200T router’s microprogramming software is related to the issue of the operation going beyond the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicious acto...

Boa file retrieval

The remote Boa server allows an attacker to read arbitrary files on the remote web server, prefixing the pathname of the file with hex-encoded ../../.. Example: GET /%2e%2e/%2e%2e/%2e%2e/etc/passwd will return /etc/passwd. OpenVAS Vulnerability Test $Id: httpdboa.nasl 8023 2017-12-07 08:36:26Z...