Working_resources_inc. Badblue
20 CVEs affecting Working_resources_inc. Badblue. Latest disclosed: 2005-05-02. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2005-0595 | | 2005-05-02 | Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter. | |
CVE-2004-2374 | | 2004-12-31 | BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php, which includes the pathname in the so… | |
CVE-2004-1727 | | 2004-08-20 | BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a large number of connections from the same IP address. | |
CVE-2003-0332 | | 2003-06-09 | The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a filename extension after performing a securi… | |
CVE-2002-1541 | | 2003-03-31 | BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / (slash). | |
CVE-2002-2289 | | 2002-12-31 | soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords. | |
CVE-2002-2170 | | 2002-12-31 | Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP address of the local host, but does not… | |
CVE-2002-1973 | | 2002-12-31 | Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static libraries in Visual C+… | |
CVE-2002-1685 | | 2002-12-31 | Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script a… | |
CVE-2002-1684 | | 2002-12-31 | Directory traversal vulnerability in (1) Deerfield D2Gfx 1.0.2 or (2) BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 allows remote attacke… | |
CVE-2002-1683 | | 2002-12-31 | Cross-site scripting (XSS) vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute arbitrary script as other users by injecting scri… | |
CVE-2002-1023 | | 2002-10-04 | BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI. | |
CVE-2002-1022 | | 2002-10-04 | BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges. | |
CVE-2002-1021 | | 2002-10-04 | BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte. | |
CVE-2002-0800 | | 2002-08-12 | BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end. | |
CVE-2002-0326 | | 2002-06-25 | Cross-site scripting vulnerability in BadBlue before 1.6.1 beta allows remote attackers to execute arbitrary script and possibly additional commands via a URL… | |
CVE-2002-0325 | | 2002-06-25 | Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL. | |
CVE-2001-1140 | | 2001-08-22 | BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 (null byte) to the request. | |
CVE-2001-0277 | | 2001-05-03 | Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arbitrary commands via… | |
CVE-2001-0276 | | 2001-05-03 | ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the server by directly calling ext.dll without… |