Vulnerabilities

TI-2009-04622 CVE-2009-4866 · GHSA-x3vr-2f3g-g32g

Cross-site scripting (XSS) vulnerability in search.cgi in Matt's Script Archive (MSA)…

LOW 22

Cross-site scripting (XSS) vulnerability in search.cgi in Matt's Script Archive (MSA) Simple Search 1.0 allows remote attackers to inject arbitrary web script or HTML via the terms parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01097 Published 2010-05-10 No fix listed CWE-79

TI-2009-01692 CVE-2009-1777 · GHSA-r6v4-67ph-q6m5

CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly…

LOW 27

CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the redirect parame…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01972 Published 2009-05-22 No fix listed CWE-20

TI-2009-01691 CVE-2009-1776 · GHSA-4mr2-3rqg-9c4g

Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via javascript: URIs in the (1) request…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01462 Published 2009-05-22 No fix listed CWE-79

TI-2006-01644 CVE-2006-1698 · GHSA-4g8f-f2wr-wmxm

Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) url, (2) city, (3) state, or (4) country parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01164 Published 2006-04-11 No fix listed

TI-2006-01643 CVE-2006-1697 · GHSA-j6w5-7wgg-qq7q

Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) Your Name, (2) E-Mail, or (3) Comments fields when posting a message.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02143 Published 2006-04-11 No fix listed

TI-2002-02028 CVE-2002-2109 · GHSA-9r3w-hpj5-5rpw

Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER…

LOW 38

Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2) a spoofed referer with a trusted domain/URL after the beginni…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02686 Published 2005-08-05 No fix listed

TI-2002-01690 CVE-2002-1771 · GHSA-c999-9vcr-3xmc

Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous…

LOW 26

Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline character followed by CC:, BCC:, or additional TO: fields in the email and realname CGI variables.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01351 Published 2005-06-21 No fix listed

TI-1999-00880 CVE-1999-0930 · GHSA-j7f9-9j32-hxj3

wwwboard allows a remote attacker to delete message board articles via a malformed argument.

LOW 26

wwwboard allows a remote attacker to delete message board articles via a malformed argument.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01481 Published 2002-03-09 No fix listed

TI-2001-00894 CVE-2001-0937 · GHSA-j776-x47j-qph6

PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell…

LOW 37

PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) recipient or (2) pgpuserid parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01875 Published 2002-02-02 No fix listed

TI-1999-01426 CVE-1999-1479 · GHSA-ghqf-fqhj-vv6p

The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters.

MEDIUM 57

The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.11965 Published 2001-09-12 No fix listed

TI-1999-01324 CVE-1999-1377 · GHSA-q74x-f7gq-p3xf

Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a ..

LOW 27

Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02123 Published 2001-09-12 No fix listed

TI-1999-01003 CVE-1999-1053 · GHSA-7fhv-p5jq-2v6f

guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and…

HIGH 74

guestbook.pl cleanses user-inserted SSI commands by removing text between "" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly oth…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.85205 Published 2001-09-12 No fix listed

TI-1999-01001 CVE-1999-1051 · GHSA-6vh4-w25v-6gh9

Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories…

LOW 26

Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0144 Published 2001-09-12 No fix listed

TI-1999-01000 CVE-1999-1050 · GHSA-rrx8-7p59-h436

Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote…

LOW 33

Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07851 Published 2001-09-12 No fix listed

TI-2001-00352 CVE-2001-0357 · GHSA-jhvj-8ghp-wf3r

FormMail.pl in FormMail 1.6 and earlier allows a remote attacker to send anonymous email…

LOW 36

FormMail.pl in FormMail 1.6 and earlier allows a remote attacker to send anonymous email (spam) by modifying the recipient and message parameters.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01351 Published 2001-07-27 No fix listed

TI-1999-00904 CVE-1999-0954 · GHSA-g8px-7v5p-w54w

WWWBoard has a default username and default password.

LOW 35

WWWBoard has a default username and default password.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01144 Published 2000-10-13 No fix listed

TI-2000-00411 CVE-2000-0411 · GHSA-gggj-8j7g-cpwh

Matt Wright's FormMail CGI script allows remote attackers to obtain environmental…

LOW 33

Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07799 Published 2000-07-12 No fix listed

TI-1999-00903 CVE-1999-0953 · GHSA-7x89-22x4-gr9x

WWWBoard stores encrypted passwords in a password file that is under the web root and…

MEDIUM 54

WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08604 Published 2000-01-04 No fix listed

TI-1999-00171 CVE-1999-0173 · GHSA-jw47-w8q9-cxg3

FormMail CGI program can be used by web servers other than the host server that the program resides on.

LOW 31

FormMail CGI program can be used by web servers other than the host server that the program resides on.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04923 Published 1999-09-29 No fix listed

TI-1999-00170 CVE-1999-0172 · GHSA-p73c-389w-hggm

FormMail CGI program allows remote execution of commands.

LOW 39

FormMail CGI program allows remote execution of commands.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03355 Published 1999-09-29 No fix listed

Vulnerabilities

Filters