요금 엔터프라이즈

EDB-4715remotewindows검증됨

BadBlue 2.72b - Multiple Vulnerabilities

Luigi Auriemma12/10/2007

Exploit-DB에서 보기 GitLab에서 소스 보기

AI 분석AI 기반

익스플로잇 코드

Exploit code not available in database

GitLab에서 소스 보기

관련 CVE (3)

CVE-2007-6379

BadBlue 2.72b and earlier allows remote attackers to obtain sensitive information via an invalid browse parameter, which reveals the installation path in an error message.

BadBlue 2.72b and earlier allows remote attackers to obtain sensitive information via an invalid browse parameter, which reveals the installation path in an error message.

12/15/2007CWE-16

CVE-2007-6378

Directory traversal vulnerability in upload.dll in BadBlue 2.72b and earlier allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the filename parameter.

Directory traversal vulnerability in upload.dll in BadBlue 2.72b and earlier allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the filename parameter.

12/15/2007CWE-22

CVE-2007-6377

Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attackers to execute arbitrary code via a long query string.

Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attackers to execute arbitrary code via a long query string.

12/15/2007CWE-119