Vulnerabilities

TI-2010-04143 CVE-2010-4410 · GHSA-63qf-cwcv-ff3r

CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2)…

LOW 25

CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splittin…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02489 Published 2010-12-06 Fixed CWE-94

TI-2010-02645 CVE-2010-2761 · GHSA-8x6h-gq6j-8x3j

The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple…

LOW 25

The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attack…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02713 Published 2010-12-06 Fixed CWE-94

Vulnerabilities

Filters

CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2)…

The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple…