EUVD-2008-1556

Malware in sbrugna...

EUVD-2006-4838

Malware in sbrugna...

EUVD-2008-1557

Malware in sbrugna...

EUVD-2008-1558

Malware in sbrugna...

BolinOS <= 4.5.5 (gBRootPath) Remote File Include Vulnerability

No description provided by source...

Directory traversal

Directory traversal vulnerability in system/b/contentFiles/gbincluder.php in BolinOS 4.6.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the bFileToInclude parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in BolinOS 4.6.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a system/actionspages/b/contentFiles/gBImageViewer.php, 2 ForEditor parameter to b system/actionspages/b/contentFiles/gBselectorContents.php,...

CVE-2008-1557

BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct request to system/actionspages/b/contentFiles/gBphpInfo.php, which calls the phpinfo function...

CVE-2008-1556

Multiple cross-site scripting XSS vulnerabilities in BolinOS 4.6.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a system/actionspages/b/contentFiles/gBImageViewer.php, 2 ForEditor parameter to b system/actionspages/b/contentFiles/gBselectorContents.php,...

Information disclosure

BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct request to system/actionspages/b/contentFiles/gBphpInfo.php, which calls the phpinfo function...

CVE-2008-1557

BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct request to system/actionspages/b/contentFiles/gBphpInfo.php, which calls the phpinfo function...

CVE-2008-1556

The CVE-2008-1556 entry describes multiple cross-site scripting (XSS) vulnerabilities in BolinOS 4.6.1. The flaws allow remote attackers to inject arbitrary web script or HTML via specific inputs: (1) url parameter to system/actionspages/_b/contentFiles/gBImageViewer.php, (2) ForEditor parameter ...

CVE-2008-1555

Directory traversal vulnerability in system/b/contentFiles/gbincluder.php in BolinOS 4.6.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the bFileToInclude parameter...

CVE-2008-1555

CVE-2008-1555 affects BolinOS 4.6.1, vulnerability in system/_b/contentFiles/gbincluder.php where ".." in _bFileToInclude enables directory traversal to include/execute local files. Impact: partial confidentiality, integrity, and availability. CVSS v2 base score 6.8. no remediation details provid...

CVE-2008-1556

Multiple cross-site scripting XSS vulnerabilities in BolinOS 4.6.1 allow remote attackers to inject arbitrary web script or HTML via the 1 url parameter to a system/actionspages/b/contentFiles/gBImageViewer.php, 2 ForEditor parameter to b system/actionspages/b/contentFiles/gBselectorContents.php,...

CVE-2008-1557

CVE-2008-1557 affects BolinOS 4.6.1. A remote attacker can obtain sensitive information by directly requesting system/actionspages/_b/contentFiles/gBphpInfo.php, which invokes the PHP phpinfo() function. This results in an information-disclosure vulnerability without requiring authentication. The...

DSECRG-08-022.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-022 Application: BolinOS Versions Affected: 4.6.1 Vendor URL: http://www.bolinos.com Bugs: Local File Include,Multiple XSS, System information disclosure Exploits: YES Reported: 13.03.2008 Second report: 18.03.2008 Vendor response: none...

BolinOS 4.6.1 (LFI/XSS) Multiple Security Vulnerabilities

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-08-022 Application: BolinOS Versions Affected: 4.6.1 Vendor URL: http://www.bolinos.com Bugs: Local File Include,Multiple XSS, System information disclosure Exploits: YES Reported: 13.03.2008 Second report:...

BolinOS 4.6.1 - Local File Inclusion Cross-Site Scripting

BolinOS 4.6.1 - Local File Inclusion Cross-Site Scripting Digital Security Research Group DSecRG Advisory DSECRG-08-022 Application: BolinOS Versions Affected: 4.6.1 Vendor URL: http://www.bolinos.com Bugs: Local File Include,Multiple XSS, System information disclosure Exploits: YES Reported:...

[DSECRG-08-022] Multiple Security Vulnerabilities in Bolinos 4.6.1

Digital Security Research Group DSecRG Advisory DSECRG-08-022 Application: BolinOS Versions Affected: 4.6.1 Vendor URL: http://www.bolinos.com Bugs: Local File Include,Multiple XSS, System information disclosure Exploits: YES Reported: 13.03.2008 Second report: 18.03.2008 Vendor response: none...