Preços Enterprise

EDB-4715remotewindowsVERIFICADO

BadBlue 2.72b - Multiple Vulnerabilities

Luigi Auriemma12/10/2007

Ver no Exploit-DB Ver Fonte no GitLab

Análise IADesenvolvido por IA

Código do Exploit

Exploit code not available in database

Ver Fonte no GitLab

CVEs Relacionados (3)

CVE-2007-6379

BadBlue 2.72b and earlier allows remote attackers to obtain sensitive information via an invalid browse parameter, which reveals the installation path in an error message.

BadBlue 2.72b and earlier allows remote attackers to obtain sensitive information via an invalid browse parameter, which reveals the installation path in an error message.

12/15/2007CWE-16

CVE-2007-6378

Directory traversal vulnerability in upload.dll in BadBlue 2.72b and earlier allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the filename parameter.

Directory traversal vulnerability in upload.dll in BadBlue 2.72b and earlier allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the filename parameter.

12/15/2007CWE-22

CVE-2007-6377

Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attackers to execute arbitrary code via a long query string.

Stack-based buffer overflow in the PassThru functionality in ext.dll in BadBlue 2.72b and earlier allows remote attackers to execute arbitrary code via a long query string.

12/15/2007CWE-119