BA
Product
Badblue
20
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Badblue to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2005-0595 | – | May 2 | Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter Affected: 2.55 |
| CVE-2004-2374 | – | Dec 31 | BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php, which includes the pathname in the source of the… Affected: 2.40 |
| CVE-2004-1727 | – | Aug 20 | BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a large number of connections from the same IP address Affected: 2.50 |
| CVE-2003-0332 | – | Jun 9 | The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a filename extension after performing a security check, which… Affected: through 2.2 |
| CVE-2002-1541 | – | Mar 31 | BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / (slash) Affected: 1.7.0 |
| CVE-2002-1684 | – | Dec 31 | Directory traversal vulnerability in (1) Deerfield D2Gfx 1.0.2 or (2) BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 allows remote attackers to read arbitrary… Affected: enterprise_1.5; personal_1.5.6_beta |
| CVE-2002-1683 | – | Dec 31 | Cross-site scripting (XSS) vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute arbitrary script as other users by injecting script into the… Affected: personal_1.7.3 |
| CVE-2002-1685 | – | Dec 31 | Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by… Affected: enterprise_1.7.2; personal_1.7; personal_1.7.2 |
| CVE-2002-1973 | – | Dec 31 | Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static libraries in Visual C++ 5.0, and 6.0… Affected: personal_1.7.3 |
| CVE-2002-2170 | – | Dec 31 | Working Resources Inc Affected: enterprise_1.7; enterprise_1.7.2; enterprise_1.7.3; enterprise_1.7.4 |
| CVE-2002-2289 | – | Dec 31 | soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords Affected: 1.7.1 |
| CVE-2002-1021 | – | Oct 4 | BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte Affected: 1.7.3_enterprise; 1.7.3_personal |
| CVE-2002-1022 | – | Oct 4 | BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges Affected: 1.7.3_enterprise; 1.7.3_personal |
| CVE-2002-1023 | – | Oct 4 | BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI Affected: 1.7.3_enterprise; 1.7.3_personal |
| CVE-2002-0800 | – | Aug 12 | BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end Affected: 1.7.0 |
| CVE-2002-0326 | – | Jun 25 | Cross-site scripting vulnerability in BadBlue before 1.6.1 beta allows remote attackers to execute arbitrary script and possibly additional commands via a URL that contains… Affected: 1.2.7; 1.2.8; 1.5; 1.5.6_beta; 1.6.1_beta |
| CVE-2002-0325 | – | Jun 25 | Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a Affected: 1.5.6_beta; 1.6_beta |
| CVE-2001-1140 | – | Aug 22 | BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 (null byte) to the request Affected: 1.02_beta |
| CVE-2001-0277 | – | May 3 | Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET… Affected: 1.2.7 |
| CVE-2001-0276 | – | May 3 | ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the server by directly calling ext.dll without any arguments,… Affected: 1.2.7 |
Showing 20