CVE-2008-1557

CVE-2008-1557 describes an information disclosure vulnerability in BolinOS 4.6.1. Remote attackers can directly request the gBphpInfo.php file, which executes the phpinfo function, exposing sensitive system configuration details. This vulnerability has a CVSS score of 5.0, indicating a medium severity, as it can be exploited remotely with low attack complexity and no authentication, leading to a compromise of confidentiality. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry exists for Local File Inclusion/Cross-Site Scripting, though not directly for this phpinfo disclosure. Community discussion and media coverage for this CVE are minimal.