Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cgi.pm vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2003-0615
Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote malicious users to insert web script via a URL that is fed into the form's action parameter.
Cgi.pm Cgi.pm 2.75Cgi.pm Cgi.pm 2.751Openpkg Openpkg 1.3Openpkg Openpkg CurrentCgi.pm Cgi.pm 2.753Cgi.pm Cgi.pm 2.76Cgi.pm Cgi.pm 2.73Cgi.pm Cgi.pm 2.74Cgi.pm Cgi.pm 2.93Openpkg Openpkg 1.2Cgi.pm Cgi.pm 2.78Cgi.pm Cgi.pm 2.79Debian Debian Linux 3.0
4.3
CVSSv2
CVE-2010-4410
CRLF injection vulnerability in the header function in (1) CGI.pm prior to 3.50 and (2) Simple.pm in CGI::Simple 1.112 and previous versions allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-white...
Andy Armstrong Cgi.pm 3.45Andy Armstrong Cgi.pm 3.44Andy Armstrong Cgi.pm 3.37Andy Armstrong Cgi.pm 3.36Andy Armstrong Cgi.pm 3.28Andy Armstrong Cgi.pm 3.27Andy Armstrong Cgi.pm 3.20Andy Armstrong Cgi.pm 3.19Andy Armstrong Cgi.pm 3.12Andy Armstrong Cgi.pm 3.11Andy Armstrong Cgi.pm 3.10Andy Armstrong Cgi.pm 3.03Andy Armstrong Cgi.pm 3.02Andy Armstrong Cgi.pm 2.95Andy Armstrong Cgi.pm 2.94Andy Armstrong Cgi.pm 2.86Andy Armstrong Cgi.pm 2.85Andy Armstrong Cgi.pm 2.78Andy Armstrong Cgi.pm 2.77Andy Armstrong Cgi.pm 2.72Andy Armstrong Cgi.pm 2.71Andy Armstrong Cgi.pm 2.63
4.3
CVSSv2
CVE-2010-2761
The multipart_init function in (1) CGI.pm prior to 3.50 and (2) Simple.pm in CGI::Simple 1.112 and previous versions uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote malicious users to inject arbitrary HTTP headers and c...
Andy Armstrong Cgi.pmAndy Armstrong Cgi.pm 3.41Andy Armstrong Cgi.pm 3.40Andy Armstrong Cgi.pm 3.33Andy Armstrong Cgi.pm 3.32Andy Armstrong Cgi.pm 3.25Andy Armstrong Cgi.pm 3.24Andy Armstrong Cgi.pm 3.16Andy Armstrong Cgi.pm 3.15Andy Armstrong Cgi.pm 3.43Andy Armstrong Cgi.pm 3.42Andy Armstrong Cgi.pm 3.35Andy Armstrong Cgi.pm 3.34Andy Armstrong Cgi.pm 3.27Andy Armstrong Cgi.pm 3.26Andy Armstrong Cgi.pm 3.18Andy Armstrong Cgi.pm 3.17Andy Armstrong Cgi.pm 3.10Andy Armstrong Cgi.pm 3.09Andy Armstrong Cgi.pm 3.02Andy Armstrong Cgi.pm 3.01Andy Armstrong Cgi.pm 2.93
4.3
CVSSv2
CVE-2010-4411
Unspecified vulnerability in CGI.pm 3.50 and previous versions allows remote malicious users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unknown vectors. NOTE: this issue exists because of an incomplete fix for CVE-2010-2761.
Andy Armstrong Cgi.pm 2.69Andy Armstrong Cgi.pm 2.71Andy Armstrong Cgi.pm 2.77Andy Armstrong Cgi.pm 2.78Andy Armstrong Cgi.pm 2.86Andy Armstrong Cgi.pm 2.85Andy Armstrong Cgi.pm 2.94Andy Armstrong Cgi.pm 2.93Andy Armstrong Cgi.pm 2.95Andy Armstrong Cgi.pm 2.40Andy Armstrong Cgi.pm 2.38Andy Armstrong Cgi.pm 2.48Andy Armstrong Cgi.pm 2.45Andy Armstrong Cgi.pm 2.55Andy Armstrong Cgi.pm 2.54Andy Armstrong Cgi.pm 2.53Andy Armstrong Cgi.pm 2.62Andy Armstrong Cgi.pm 2.61Andy Armstrong Cgi.pm 1.55Andy Armstrong Cgi.pm 1.56Andy Armstrong Cgi.pm 2.17Andy Armstrong Cgi.pm 2.18
5
CVSSv2
CVE-2012-5526
CGI.pm module prior to 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote malicious users to inject arbitrary headers into responses from applications that use CGI.pm.
Andy Armstrong Cgi.pm
4.3
CVSSv2
CVE-2016-4561
Cross-site scripting (XSS) vulnerability in the cgierror function in CGI.pm in ikiwiki prior to 3.20160506 might allow remote malicious users to inject arbitrary web script or HTML via unspecified vectors involving an error message.
Ikiwiki IkiwikiDebian Debian Linux 8.0
7.5
CVSSv2
CVE-2012-5195
Heap-based buffer overflow in the Perl_repeatcpy function in util.c in Perl 5.12.x prior to 5.12.5, 5.14.x prior to 5.14.3, and 5.15.x prior to 15.15.5 allows context-dependent malicious users to cause a denial of service (memory consumption and crash) or possibly execute arbitra...
Perl Perl 5.12.0Perl Perl 5.12.1Perl Perl 5.14.0Perl Perl 5.12.2Perl Perl 5.12.3Perl Perl 5.12.4Perl Perl 5.14.1Perl Perl 5.14.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
hardcodedarbitrary codeCVE-2024-2404CVE-2024-21111CVE-2024-28627CVE-2024-4073information disclosureCVE-2024-32780CVE-2024-4040
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook