WR
Vendor
Working Resources Inc.
20
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2005-0595 | BA Badblue Working Resources Inc. | – | May 2 | Buffer overflow in ext.dll in BadBlue 2.55 allows remote attackers to execute arbitrary code via a long mfcisapicommand parameter |
| CVE-2004-2374 | BA Badblue Working Resources Inc. | – | Dec 31 | BadBlue 2.4 allows remote attackers to obtain the location of the server installation path via a request for phptest.php, which includes the pathname in the source of the… |
| CVE-2004-1727 | BA Badblue Working Resources Inc. | – | Aug 20 | BadBlue 2.5 allows remote attackers to cause a denial of service (refuse HTTP connections) via a large number of connections from the same IP address |
| CVE-2003-0332 | BA Badblue Working Resources Inc. | – | Jun 9 | The ISAPI extension in BadBlue 1.7 through 2.2, and possibly earlier versions, modifies the first two letters of a filename extension after performing a security check, which… |
| CVE-2002-1541 | BA Badblue Working Resources Inc. | – | Mar 31 | BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / (slash) |
| CVE-2002-1684 | BA Badblue Working Resources Inc. | – | Dec 31 | Directory traversal vulnerability in (1) Deerfield D2Gfx 1.0.2 or (2) BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 allows remote attackers to read arbitrary… |
| CVE-2002-1683 | BA Badblue Working Resources Inc. | – | Dec 31 | Cross-site scripting (XSS) vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute arbitrary script as other users by injecting script into the… |
| CVE-2002-1685 | BA Badblue Working Resources Inc. | – | Dec 31 | Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by… |
| CVE-2002-1973 | BA Badblue Working Resources Inc. | – | Dec 31 | Buffer overflow in CHttpServer::OnParseError in the ISAPI extension (Isapi.cpp) when built using Microsoft Foundation Class (MFC) static libraries in Visual C++ 5.0, and 6.0… |
| CVE-2002-2170 | BA Badblue Working Resources Inc. | – | Dec 31 | Working Resources Inc |
| CVE-2002-2289 | BA Badblue Working Resources Inc. | – | Dec 31 | soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords |
| CVE-2002-1021 | BA Badblue Working Resources Inc. | – | Oct 4 | BadBlue server allows remote attackers to read restricted files, such as EXT.INI, via an HTTP request that contains a hex-encoded null byte |
| CVE-2002-1022 | BA Badblue Working Resources Inc. | – | Oct 4 | BadBlue server stores passwords in plaintext in the ext.ini file, which could allow local and possibly remote attackers to gain privileges |
| CVE-2002-1023 | BA Badblue Working Resources Inc. | – | Oct 4 | BadBlue server allows remote attackers to cause a denial of service (crash) via an HTTP GET request without a URI |
| CVE-2002-0800 | BA Badblue Working Resources Inc. | – | Aug 12 | BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end |
| CVE-2002-0326 | BA Badblue Working Resources Inc. | – | Jun 25 | Cross-site scripting vulnerability in BadBlue before 1.6.1 beta allows remote attackers to execute arbitrary script and possibly additional commands via a URL that contains… |
| CVE-2002-0325 | BA Badblue Working Resources Inc. | – | Jun 25 | Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a |
| CVE-2001-1140 | BA Badblue Working Resources Inc. | – | Aug 22 | BadBlue Personal Edition v1.02 beta allows remote attackers to read source code for executable programs by appending a %00 (null byte) to the request |
| CVE-2001-0277 | BA Badblue Working Resources Inc. | – | May 3 | Buffer overflow in ext.dll in BadBlue 1.02.07 Personal Edition allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long HTTP GET… |
| CVE-2001-0276 | BA Badblue Working Resources Inc. | – | May 3 | ext.dll in BadBlue 1.02.07 Personal Edition web server allows remote attackers to determine the physical path of the server by directly calling ext.dll without any arguments,… |