Vulnerabilities

TI-2005-01277 CVE-2005-1352 · GHSA-9g2f-x9gx-w6v2

Cross-site scripting (XSS) vulnerability in the ad.cgi script allows remote attackers to…

LOW 23

Cross-site scripting (XSS) vulnerability in the ad.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01424 Published 2005-04-28 No fix listed

TI-2005-01276 CVE-2005-1351 · GHSA-jv26-4jgp-rmm4

LOW 38

The ad.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02629 Published 2005-04-28 No fix listed

TI-2005-01275 CVE-2005-1350 · GHSA-r88q-6q7c-4r57

LOW 26

The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01697 Published 2005-04-28 No fix listed

TI-2001-00025 CVE-2001-0025 · GHSA-2gf2-mh53-2r7m

MEDIUM 57

ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.12271 Published 2001-02-02 No fix listed