Vulnerabilities

TI-2017-03618 CVE-2017-5616 · GHSA-253q-85fr-vjfv

Cross-site scripting (XSS) vulnerability in cgiemail and cgiecho allows remote attackers…

LOW 30

Cross-site scripting (XSS) vulnerability in cgiemail and cgiecho allows remote attackers to inject arbitrary web script or HTML via the addendum parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01168 Published 2017-03-03 No fix listed CWE-79

TI-2017-03617 CVE-2017-5615 · GHSA-r88j-2w5r-2c6x

cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location.

LOW 30

cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01136 Published 2017-03-03 No fix listed CWE-601

TI-2017-03615 CVE-2017-5613 · GHSA-gh36-xvm9-3hm2

Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute…

LOW 39

Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary code via format string specifiers in a template file.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.0256 Published 2017-03-03 No fix listed CWE-134

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in cgiemail and cgiecho allows remote attackers…

cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location.

Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute…