Read the docs

Cgi Rescue

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Cgi Rescue records in CISA KEV

No Cgi Rescue vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Cgi Web Mailer · all components

Priority LOW 22

CRLF injection vulnerability in CGI RESCUE Web Mailer before 1.04 allows remote attackers to inject arbitrary HTTP headers, and conduct cross-site scripting (XSS) or HTTP response splitting attacks, via CRLF sequences in…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01065 Published 2009-05-08 No fix listed CWE-79
Open these records in search →