34 matches found
EUVD-2008-1558
Malware in sbrugna...
EUVD-2006-4838
Malware in sbrugna...
EUVD-2008-1557
Malware in sbrugna...
EUVD-2008-1556
Malware in sbrugna...
BolinOS <= 4.5.5 (gBRootPath) Remote File Include Vulnerability
No description provided by source...
Information disclosure
BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct request to system/actionspages/b/contentFiles/gBphpInfo.php, which calls the phpinfo function...
Directory traversal
Directory traversal vulnerability in system/b/contentFiles/gbincluder.php in BolinOS 4.6.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the bFileToInclude parameter...
CVE-2008-1557
BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct request to system/actionspages/b/contentFiles/gBphpInfo.php, which calls the phpinfo function...
CVE-2008-1556
Multiple cross-site scripting XSS vulnerabilities in BolinOS 4.6.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a system/actionspages/b/contentFiles/gBImageViewer.php, 2 ForEditor parameter to b system/actionspages/b/contentFiles/gBselectorContents.php,...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in BolinOS 4.6.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a system/actionspages/b/contentFiles/gBImageViewer.php, 2 ForEditor parameter to b system/actionspages/b/contentFiles/gBselectorContents.php,...
CVE-2008-1557
BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct request to system/actionspages/b/contentFiles/gBphpInfo.php, which calls the phpinfo function...
CVE-2008-1556
Multiple cross-site scripting XSS vulnerabilities in BolinOS 4.6.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a system/actionspages/b/contentFiles/gBImageViewer.php, 2 ForEditor parameter to b system/actionspages/b/contentFiles/gBselectorContents.php,...
CVE-2008-1555
Directory traversal vulnerability in system/b/contentFiles/gbincluder.php in BolinOS 4.6.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the bFileToInclude parameter...
CVE-2008-1557
CVE-2008-1557 affects BolinOS 4.6.1. A remote attacker can obtain sensitive information by directly requesting system/actionspages/_b/contentFiles/gBphpInfo.php, which invokes the PHP phpinfo() function. This results in an information-disclosure vulnerability without requiring authentication. The...
CVE-2008-1556
The CVE-2008-1556 entry describes multiple cross-site scripting (XSS) vulnerabilities in BolinOS 4.6.1. The flaws allow remote attackers to inject arbitrary web script or HTML via specific inputs: (1) url parameter to system/actionspages/_b/contentFiles/gBImageViewer.php, (2) ForEditor parameter ...
CVE-2008-1555
CVE-2008-1555 affects BolinOS 4.6.1, vulnerability in system/_b/contentFiles/gbincluder.php where ".." in _bFileToInclude enables directory traversal to include/execute local files. Impact: partial confidentiality, integrity, and availability. CVSS v2 base score 6.8. no remediation details provid...
BolinOS 4.6.1 (LFI/XSS) Multiple Security Vulnerabilities
No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-022 Application: BolinOS Versions Affected: 4.6.1 Vendor URL: http://www.bolinos.com Bugs: Local File Include,Multiple XSS, System information disclosure Exploits: YES Reported: 13.03.2008 Second report:...
DSECRG-08-022.txt
Digital Security Research Group DSecRG Advisory DSECRG-08-022 Application: BolinOS Versions Affected: 4.6.1 Vendor URL: http://www.bolinos.com Bugs: Local File Include,Multiple XSS, System information disclosure Exploits: YES Reported: 13.03.2008 Second report: 18.03.2008 Vendor response: none...
BolinOS 4.6.1 (LFI/XSS) Multiple Security Vulnerabilities
Exploit for unknown platform in category web applications ========================================================= BolinOS 4.6.1 LFI/XSS Multiple Security Vulnerabilities ========================================================= Digital Security Research Group DSecRG Advisory DSECRG-08-022...
[DSECRG-08-022] Multiple Security Vulnerabilities in Bolinos 4.6.1
Digital Security Research Group DSecRG Advisory DSECRG-08-022 Application: BolinOS Versions Affected: 4.6.1 Vendor URL: http://www.bolinos.com Bugs: Local File Include,Multiple XSS, System information disclosure Exploits: YES Reported: 13.03.2008 Second report: 18.03.2008 Vendor response: none...