CVE-2007-5796: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management console in Blue Coat ProxySG before 4.2.6.1, and 5.x before 5.2.2.5, allows remote attackers to inject arbitrary web script or HTML by modifying the URL that is used for loading Certificate Revocation Lists...

Blue Coat ProxySG crossite scripting

Crossite scripting with administration interface...

Two XSS on Blue Coat ProxySG Management Console

PR07-29: Two XSS on Blue Coat ProxySG Management Console Vulnerability found: 23 July 2007 Vendor informed: 20 August 2007 Vulnerability fixed: 29 October 2007 Advisory publicly released: 1 November 2007 Severity: Medium Description: Blue Coat SG400 is vulnerable to a couple of XSS holes...

Directory traversal

Directory traversal vulnerability in igallery.asp in Blue-Collar Productions i-Gallery 3.4 allows remote attackers to read arbitrary files via encoded backslash sequences in the d parameter, as demonstrated by a "%5c../../%5c" sequence...

CVE-2007-5776

Directory traversal vulnerability in igallery.asp in Blue-Collar Productions i-Gallery 3.4 allows remote attackers to read arbitrary files via encoded backslash sequences in the d parameter, as demonstrated by a "%5c../../%5c" sequence...

CVE-2007-5777

Blue-Collar Productions i-Gallery 3.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing a base64-encoded password via a direct request for igallery.mdb...

CVE-2007-5777

CVE-2007-5777 affects Blue-Collar Productions i-Gallery 3.4. The vendor’s application stores sensitive information under the web root with insufficient access control, permitting remote attackers to download a file (igallery.mdb) containing a base64-encoded password via a direct request. The NVD ...

ProCheckUp Security Advisory 2007.29

PR07-29: Two XSS on Blue Coat ProxySG Management Console Vulnerability found: 23 July 2007 Vendor informed: 20 August 2007 Vulnerability fixed: 29 October 2007 Advisory publicly released: 1 November 2007 Severity: Medium Description: Blue Coat SG400 is vulnerable to a couple of XSS holes...

CVE-2007-5776: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in igallery.asp in Blue-Collar Productions i-Gallery 3.4 allows remote attackers to read arbitrary files via encoded backslash sequences in the d parameter, as demonstrated by a "%5c../../%5c" sequence...

Blue Coat ProxySG Management Console - URI Handler Multiple Cross-Site Scripting Vulnerabilities

Blue Coat ProxySG Management Console - URI Handler Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/26286/info Blue Coat ProxySG Management Console is prone to two cross-site scripting vulnerabilities because the application fails to properly sanitize...

Unfixed XSS vulnerability at blue-1.hevra.haifa.ac.il

Security researcher Narcoticxs, has submitted on 24/09/2007 a cross-site-scripting XSS vulnerability affecting blue-1.hevra.haifa.ac.il, which at the time of submission ranked 20905 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/09/2007. It...

Exploits PHP Blue Dragon CMS 3.0.0 Remote File Inclusion Vulnerability

No description provided by source. !usr/bin/perl egs-fuckphpbluedragon300.pl Copyright 2007 Emanuele Gentili [email protected] www.emanuele-gentili.com This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the...

egs-fuckphpbluedragon300.pl.txt

!usr/bin/perl egs-fuckphpbluedragon300.pl Copyright 2007 Emanuele Gentili www.emanuele-gentili.com This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the Licens...

PHP Blue Dragon CMS 3.0.0 Remote File Inclusion Vulnerability (0dd exploit)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Exploit is attached. E. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 GNU/Linux Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGwRXDmErIuzAYjw8RApkJAKCkxFrH2XmwTS37D0B8BmaFe47EkwCgs5Uc 6XtVfkHyqOVv51uylzwT3WQ= =49Nv -----E...

Remote file inclusion

PHP remote file inclusion vulnerability in publicincludes/pubblocks/activecontent.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter, a different vector than CVE-2006-2392, CVE-2006-3076, and CVE-2006-6958...

Sql injection

SQL injection vulnerability in index.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary SQL commands via the articleid parameter in a "print articles" action...

Immunity Canvas: PBD_INCLUDE

Name| pbdinclude ---|--- CVE| CVE-2007-4313 Exploit Pack| CANVAS Description| Php Blue Dragon CMS Remote Include Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: phpbluedragon.pl CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4313 CVE Name: CVE-2007-4313...

CVE-2007-4313

PHP remote file inclusion vulnerability in publicincludes/pubblocks/activecontent.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter, a different vector than CVE-2006-2392, CVE-2006-3076, and CVE-2006-6958...

CVE-2007-4312

SQL injection vulnerability in index.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary SQL commands via the articleid parameter in a "print articles" action...

CVE-2007-4313

PHP remote file inclusion vulnerability in publicincludes/pubblocks/activecontent.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter, a different vector than CVE-2006-2392, CVE-2006-3076, and CVE-2006-6958...