34 matches found
EUVD-2014-5258
Malware in sbrugna...
EUVD-2006-2311
Malware in sbrugna...
EUVD-2006-2312
Malware in sbrugna...
EUVD-2011-2072
Malware in sbrugna...
EUVD-2011-2071
Malware in sbrugna...
BlueDragon 6.2.1 / 7.0 / 7.1 Cross Site Scripting
I. VULNERABILITY BlueDragon 6.2.1, 7.0, 7.1 Reflected Cross-Site Scripting II. SOURCE: http://www.newatlanta.com/c/products/bluedragon/download/home III. BACKGROUND BlueDragon is a family of runtime server-side products for the deployment of ColdFusion Markup Language CFML pages - with native...
BlueDragon CFChart Servlet < 7.1.1.18527 Directory Traversal Vulnerability - Active Check
BlueDragon CFChart Servlet is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
New Atlanta BlueDragon Directory Traversal Vulnerability
New Atlanta BlueDragon is a ColdFusion Markup Language engine. A directory traversal vulnerability in New Atlanta BlueDragon's CFChart servlet allows an attacker to read or delete arbitrary files due to a failure to adequately filter the 'QUERYSTRING' value in the cfchart.cfchart file...
CVE-2014-5370
Directory traversal vulnerability in the CFChart servlet com.naryx.tagfusion.cfm.cfchartServlet in New Atlanta BlueDragon before 7.1.1.18527 allows remote attackers to read or possibly delete arbitrary files via a .. dot dot in the QUERYSTRING to cfchart.cfchart...
Directory traversal
Directory traversal vulnerability in the CFChart servlet com.naryx.tagfusion.cfm.cfchartServlet in New Atlanta BlueDragon before 7.1.1.18527 allows remote attackers to read or possibly delete arbitrary files via a .. dot dot in the QUERYSTRING to cfchart.cfchart...
CVE-2014-5370
Directory traversal vulnerability in the CFChart servlet com.naryx.tagfusion.cfm.cfchartServlet in New Atlanta BlueDragon before 7.1.1.18527 allows remote attackers to read or possibly delete arbitrary files via a .. dot dot in the QUERYSTRING to cfchart.cfchart...
BlueDragon CFChart Servlet 7.1.1.17759 - Arbitrary File RetrievalDeletion
BlueDragon CFChart Servlet 7.1.1.17759 - Arbitrary File RetrievalDeletion Vulnerability title: Arbitrary File Retrieval + Deletion In New Atlanta BlueDragon CFChart Servlet CVE: CVE-2014-5370 Vendor: New Atlanta Product: BlueDragon CFChart Servlet Affected version: 7.1.1.17759 Fixed version:...
BlueDragon CFChart Servlet 7.1.1.17759 - Arbitrary File Retrieval/Deletion
Vulnerability title: Arbitrary File Retrieval + Deletion In New Atlanta BlueDragon CFChart Servlet CVE: CVE-2014-5370 Vendor: New Atlanta Product: BlueDragon CFChart Servlet Affected version: 7.1.1.17759 Fixed version: 7.1.1.18527 Reported by: Mike Westmacott Details: The CFChart servlet of...
BlueDragon CFChart Servlet 7.1.1.17759 Directory Traversal
Vulnerability title: Arbitrary File Retrieval + Deletion In New Atlanta BlueDragon CFChart Servlet CVE: CVE-2014-5370 Vendor: New Atlanta Product: BlueDragon CFChart Servlet Affected version: 7.1.1.17759 Fixed version: 7.1.1.18527 Reported by: Mike Westmacott Details: The CFChart servlet of...
BlueDragon Server 6.2.1 .CFM Files Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18624/info BlueDragon is prone to a remote denial-of-service vulnerability. This issue is due to the application's failure to efficiently handle malformed GET requests. An attacker can exploit this issue to cause the...
BlueDragon 7.1 Cross Site Scripting
Exploit Title: BlueDragon 7.1 Enterprise Server JX Multiple XSS Vulnerabilities Google Dork: Cost : 5999$ Date: 01/08/2011 Author: www.newatlanta.com/bluedragon/ Software Link: www.newatlanta.com/bluedragon/ Version: 7.1 Tested on: Windows 7 , Ubuntu 11 CVE : Exploit Discovered : SubhashDasyam...
CVE-2011-2077
The default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier enables external TCP connections to port 10000, instead of connections only from 127.0.0.1, which makes it easier for remote attackers to have an unspecified impact via a TCP session...
CVE-2011-2078
Multiple cross-site scripting XSS vulnerabilities in the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Default configuration
The default configuration of the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier enables external TCP connections to port 10000, instead of connections only from 127.0.0.1, which makes it easier for remote attackers to have an unspecified impact via a TCP session...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...