EUVD-2011-2072

Malware in sbrugna...

EUVD-2011-2071

Malware in sbrugna...

EUVD-2014-5258

Malware in sbrugna...

CVE-2014-5370

Directory traversal vulnerability in the CFChart servlet com.naryx.tagfusion.cfm.cfchartServlet in New Atlanta BlueDragon before 7.1.1.18527 allows remote attackers to read or possibly delete arbitrary files via a .. dot dot in the QUERYSTRING to cfchart.cfchart...

Directory traversal

Directory traversal vulnerability in the CFChart servlet com.naryx.tagfusion.cfm.cfchartServlet in New Atlanta BlueDragon before 7.1.1.18527 allows remote attackers to read or possibly delete arbitrary files via a .. dot dot in the QUERYSTRING to cfchart.cfchart...

PT-2015-3799

Name of the Vulnerable Software and Affected Versions New Atlanta BlueDragon versions prior to 7.1.1.18527 Description The issue allows remote attackers to potentially read or delete arbitrary files due to a directory traversal vulnerability in the CFChart servlet. This is achieved by including a...

CVE-2014-5370: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the CFChart servlet com.naryx.tagfusion.cfm.cfchartServlet in New Atlanta BlueDragon before 7.1.1.18527 allows remote attackers to read or possibly delete arbitrary files via a .. dot dot in the QUERYSTRING to cfchart.cfchart...

CVE-2011-2077

The default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier enables external TCP connections to port 10000, instead of connections only from 127.0.0.1, which makes it easier for remote attackers to have an unspecified impact via a TCP session...

CVE-2011-2078

Multiple cross-site scripting XSS vulnerabilities in the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Default configuration

The default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier enables external TCP connections to port 10000, instead of connections only from 127.0.0.1, which makes it easier for remote attackers to have an unspecified impact via a TCP session...

CVE-2011-2077

The default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier enables external TCP connections to port 10000, instead of connections only from 127.0.0.1, which makes it easier for remote attackers to have an unspecified impact via a TCP session...

CVE-2011-2077

The CVE-2011-2077 entry concerns the default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier, which allows external TCP connections to port 10000 instead of restricting to 127.0.0.1. This misconfiguration enables remote TCP sessions and is described...

PT-2011-3574

Name of the Vulnerable Software and Affected Versions MediaCAST versions 8 and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the New Atlanta BlueDragon administrative interface. These vulnerabilities allow remote attackers to inject arbitrary web scri...

PT-2011-3573

Name of the Vulnerable Software and Affected Versions MediaCAST versions 8 and earlier Description The default configuration of the New Atlanta BlueDragon administrative interface enables external TCP connections to port 10000, making it easier for remote attackers to have an unspecified impact v...