Vulnerability in Bolinos

CVE-2006-4851

PHP remote file inclusion vulnerability in system/_b/contentFiles/gBHTMLEditor.php in BolinOS 4.5.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the gBRootPath parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

EPSS: 0.022 (80.7th percentile) — read the EPSS interpretation.

Affected products

  • Bolinos — versions 4.3.0, 4.4.1
  • N/a — versions n/a

References