The Dreambox is a series of Linux-powered DVB satellite, terrestrial and cable digital television receivers (set-top box).
Dreambox suffers from a file download vulnerability thru directory traversal with appending the '/' character in the HTTP GET method of the affected host address. The attacker can get to sensitive information like paid channel keys, usernames, passwords, config and plug-ins info, etc.