6.8
CVSSv2

CVE-2008-1555

Published: 31/03/2008 Updated: 11/10/2018
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Directory traversal vulnerability in system/_b/contentFiles/gbincluder.php in BolinOS 4.6.1 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the _bFileToInclude parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

bolinos bolinos 4.6.1

Exploits

Digital Security Research Group [DSecRG] Advisory #DSECRG-08-022 Application: BolinOS Versions Affected: 461 Vendor URL: wwwbolinoscom Bugs: Local File Include,Multiple XSS, System information disclosure Exploits: YES Reported: ...