Cpanel Cgiecho
3 CVEs affecting Cpanel Cgiecho. Latest disclosed: 2017-03-03. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-5613 | High | 7.8 | 2017-03-03 | Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary code via format string specifiers in a template file. |
CVE-2017-5616 | Medium | 6.1 | 2017-03-03 | Cross-site scripting (XSS) vulnerability in cgiemail and cgiecho allows remote attackers to inject arbitrary web script or HTML via the addendum parameter. |
CVE-2017-5615 | Medium | 6.1 | 2017-03-03 | cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location. |