Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Leif M. Wright records in CISA KEVNo Leif M. Wright vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 57
ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.12271 · Published 2001-02-02 · No fix listed
Priority LOW 38
The ad.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02629 · Published 2005-04-28 · No fix listed
Priority LOW 26
The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01697 · Published 2005-04-28 · No fix listed
Priority LOW 23
Cross-site scripting (XSS) vulnerability in the ad.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01424 · Published 2005-04-28 · No fix listed
Open these records in search →