Total vulnerabilities in the database
BadBlue 1.7.0 allows remote attackers to list the contents of directories via a URL with an encoded '%' character at the end.
CVSS v2:
No CWE or OWASP classifications available.