Browse CVEs

MEDIUM 5.0 CVE-2004-2374 BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php, which includes the pathname… Badblue No fix yet Fix from $1,6002004-12-31 MEDIUM 5.0 CVE-2004-1727 BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a large number of connections from the same IP address. Badblue No fix yet Fix from $1,6002004-08-20 HIGH 7.5 CVE-2002-1541 BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / (slash). Badblue Mitigation only Fix from $1,9502003-03-31 HIGH 7.5 CVE-2002-2170 Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP address of the local host, bu… Badblue No fix yet Fix from $1,9502002-12-31 MEDIUM 5.0 CVE-2002-2289 soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords. Badblue No fix yet Fix from $1,6002002-12-31 HIGH 7.5 CVE-2002-1022 BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges. Badblue No fix yet Fix from $1,9502002-10-04 MEDIUM 5.0 CVE-2002-1021 BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte. Badblue No fix yet Fix from $1,6002002-10-04 MEDIUM 5.0 CVE-2002-1023 BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI. Badblue No fix yet Fix from $1,6002002-10-04 MEDIUM 5.0 CVE-2001-1140 BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 (null byte) to the request. Badblue Mitigation only Fix from $1,6002001-08-22