BlueDragon - cfchart Path Traversal Detection (CVE-2014-5370)

Detects CVE-2014-5370 by requesting /cfchart.cfchart?../../../etc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """BlueDragon CFChart servlet path traversal CVE-2014-5370.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient...

EUVD-2006-2311

Malware in sbrugna...

EUVD-2006-2312

Malware in sbrugna...

EUVD-2011-2072

Malware in sbrugna...

EUVD-2011-2071

Malware in sbrugna...

EUVD-2014-5258

Malware in sbrugna...

BlueDragon 6.2.1 / 7.0 / 7.1 Cross Site Scripting

I. VULNERABILITY BlueDragon 6.2.1, 7.0, 7.1 Reflected Cross-Site Scripting II. SOURCE: http://www.newatlanta.com/c/products/bluedragon/download/home III. BACKGROUND BlueDragon is a family of runtime server-side products for the deployment of ColdFusion Markup Language CFML pages - with native...

BlueDragon CFChart Servlet < 7.1.1.18527 Directory Traversal Vulnerability - Active Check

BlueDragon CFChart Servlet is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

New Atlanta BlueDragon Directory Traversal Vulnerability

New Atlanta BlueDragon is a ColdFusion Markup Language engine. A directory traversal vulnerability in New Atlanta BlueDragon's CFChart servlet allows an attacker to read or delete arbitrary files due to a failure to adequately filter the 'QUERYSTRING' value in the cfchart.cfchart file...

CVE-2014-5370

Directory traversal vulnerability in the CFChart servlet com.naryx.tagfusion.cfm.cfchartServlet in New Atlanta BlueDragon before 7.1.1.18527 allows remote attackers to read or possibly delete arbitrary files via a .. dot dot in the QUERYSTRING to cfchart.cfchart...

Directory traversal

Directory traversal vulnerability in the CFChart servlet com.naryx.tagfusion.cfm.cfchartServlet in New Atlanta BlueDragon before 7.1.1.18527 allows remote attackers to read or possibly delete arbitrary files via a .. dot dot in the QUERYSTRING to cfchart.cfchart...

CVE-2014-5370

Directory traversal vulnerability in the CFChart servlet com.naryx.tagfusion.cfm.cfchartServlet in New Atlanta BlueDragon before 7.1.1.18527 allows remote attackers to read or possibly delete arbitrary files via a .. dot dot in the QUERYSTRING to cfchart.cfchart...

BlueDragon CFChart Servlet 7.1.1.17759 - Arbitrary File RetrievalDeletion

BlueDragon CFChart Servlet 7.1.1.17759 - Arbitrary File RetrievalDeletion Vulnerability title: Arbitrary File Retrieval + Deletion In New Atlanta BlueDragon CFChart Servlet CVE: CVE-2014-5370 Vendor: New Atlanta Product: BlueDragon CFChart Servlet Affected version: 7.1.1.17759 Fixed version:...

CVE-2014-5370: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the CFChart servlet com.naryx.tagfusion.cfm.cfchartServlet in New Atlanta BlueDragon before 7.1.1.18527 allows remote attackers to read or possibly delete arbitrary files via a .. dot dot in the QUERYSTRING to cfchart.cfchart...

PT-2015-3799

Name of the Vulnerable Software and Affected Versions New Atlanta BlueDragon versions prior to 7.1.1.18527 Description The issue allows remote attackers to potentially read or delete arbitrary files due to a directory traversal vulnerability in the CFChart servlet. This is achieved by including a...

BlueDragon CFChart Servlet 7.1.1.17759 - Arbitrary File Retrieval/Deletion

Vulnerability title: Arbitrary File Retrieval + Deletion In New Atlanta BlueDragon CFChart Servlet CVE: CVE-2014-5370 Vendor: New Atlanta Product: BlueDragon CFChart Servlet Affected version: 7.1.1.17759 Fixed version: 7.1.1.18527 Reported by: Mike Westmacott Details: The CFChart servlet of...

BlueDragon CFChart Servlet 7.1.1.17759 Directory Traversal

Vulnerability title: Arbitrary File Retrieval + Deletion In New Atlanta BlueDragon CFChart Servlet CVE: CVE-2014-5370 Vendor: New Atlanta Product: BlueDragon CFChart Servlet Affected version: 7.1.1.17759 Fixed version: 7.1.1.18527 Reported by: Mike Westmacott Details: The CFChart servlet of...

BlueDragon Server 6.2.1 .CFM Files Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18624/info BlueDragon is prone to a remote denial-of-service vulnerability. This issue is due to the application's failure to efficiently handle malformed GET requests. An attacker can exploit this issue to cause the...

BlueDragon 7.1 Cross Site Scripting

Exploit Title: BlueDragon 7.1 Enterprise Server JX Multiple XSS Vulnerabilities Google Dork: Cost : 5999$ Date: 01/08/2011 Author: www.newatlanta.com/bluedragon/ Software Link: www.newatlanta.com/bluedragon/ Version: 7.1 Tested on: Windows 7 , Ubuntu 11 CVE : Exploit Discovered : SubhashDasyam...

CVE-2011-2078

Multiple cross-site scripting XSS vulnerabilities in the New Atlanta BlueDragon administrative interface in MediaCAST 8 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...