CVE-2006-4850

BolinOS ≤ 4.5.5 is affected by a PHP remote file inclusion vulnerability in system/_b/contentFiles/gBIndex.php that can execute arbitrary PHP code via the gBRootPath URL parameter. The root cause is improper handling of the gBRootPath parameter, enabling an attacker to include remote PHP code. Th...