Leif M. Wright

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Leif M. Wright records in CISA KEV

No Leif M. Wright vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Web Blog 6 records MEDIUM Ad.cgi 4 records MEDIUM Everythingform.cgi 1 record MEDIUM Simplestguest.cgi 1 record MEDIUM Simplestmail.cgi 1 record MEDIUM

Records

13 records

TI-2001-00023 CVE-2001-0023 · GHSA-f8jq-wv2h-hqqm

everythingform.cgi CGI program by Leif Wright allows remote attackers to execute…

MEDIUM 58

everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.14386 Published 2001-02-02 No fix listed

TI-2001-00025 CVE-2001-0025 · GHSA-2gf2-mh53-2r7m

ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands…

MEDIUM 57

ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.12271 Published 2001-02-02 No fix listed

TI-2001-00022 CVE-2001-0022 · GHSA-w3c8-c6wv-46cf

simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary…

MEDIUM 57

simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.1257 Published 2001-02-02 No fix listed

TI-2001-00024 CVE-2001-0024 · GHSA-8vx4-2r25-7xmp

simplestmail.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary…

MEDIUM 51

simplestmail.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the MyEmail parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05445 Published 2001-02-02 No fix listed

TI-2004-02218 CVE-2004-2347 · GHSA-c488-mgpm-hg4c

blog.cgi in Leif M.

MEDIUM 45

blog.cgi in Leif M. Wright Web Blog 1.1 and 1.1.5 allows remote attackers to execute arbitrary commands via shell metacharacters such as '|' in the file parameter of ViewFile requests.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.09874 Published 2005-08-16 No fix listed

TI-2005-01276 CVE-2005-1351 · GHSA-jv26-4jgp-rmm4

The ad.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.

LOW 38

The ad.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02629 Published 2005-04-28 No fix listed

TI-2006-00822 CVE-2006-0844 · GHSA-6fgq-pch8-pq54

Leif M. Wright's Blog 3.5 does not make a password comparison when authenticating an administrator via a cookie, which allows remote attackers to bypass login authentication, probably by setting the blogAdmin cookie.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01679 Published 2006-02-22 No fix listed

TI-2006-00823 CVE-2006-0845 · GHSA-fhj8-953f-fx7h

Leif M.

LOW 31

Leif M. Wright's Blog 3.5 allows remote authenticated users with administrative privileges to execute arbitrary programs, including shell commands, by configuring the sendmail path to a malicious pathname.

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.01296 Published 2006-02-22 No fix listed

TI-2004-02000 CVE-2004-2127 · GHSA-pfr8-jjp6-fj9v

Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read…

LOW 29

Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03624 Published 2005-05-27 No fix listed

TI-2006-00821 CVE-2006-0843 · GHSA-p87g-jvpm-qw44

Leif M.

LOW 26

Leif M. Wright's Blog 3.5 stores the config file and other txt files under the web root with insufficient access control, which allows remote attackers to read the administrator's password.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01425 Published 2006-02-22 No fix listed

TI-2005-01275 CVE-2005-1350 · GHSA-r88q-6q7c-4r57

The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

LOW 26

The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01697 Published 2005-04-28 No fix listed

TI-2005-01277 CVE-2005-1352 · GHSA-9g2f-x9gx-w6v2

Cross-site scripting (XSS) vulnerability in the ad.cgi script allows remote attackers to…

LOW 23

Cross-site scripting (XSS) vulnerability in the ad.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01424 Published 2005-04-28 No fix listed

TI-2006-00824 CVE-2006-0846 · GHSA-cw89-q5w8-fv4x

Multiple cross-site scripting (XSS) vulnerabilities in Leif M.

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in Leif M.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01208 Published 2006-02-22 No fix listed

Open these records in search →

Critical	4
High	3
Medium	6
Low	0
No CVSS	0