Leif M. Wright

13 CVEs across 5 Leif M. Wright products. Browse Leif M. Wright vulnerabilities, severities, and proof-of-concept exploits.

Leif M. Wright products with known CVEs

ProductCVEs
Web Blog6
Ad.cgi4
Everythingform.cgi1
Simplestguest.cgi1
Simplestmail.cgi1
Leif M. Wright CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2006-08462006-02-22Multiple cross-site scripting (XSS) vulnerabilities in Leif M. Wright's Blog 3.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Refe…
CVE-2006-08452006-02-22Leif M. Wright's Blog 3.5 allows remote authenticated users with administrative privileges to execute arbitrary programs, including shell commands, by configur…
CVE-2006-08442006-02-22Leif M. Wright's Blog 3.5 does not make a password comparison when authenticating an administrator via a cookie, which allows remote attackers to bypass login…
CVE-2006-08432006-02-22Leif M. Wright's Blog 3.5 stores the config file and other txt files under the web root with insufficient access control, which allows remote attackers to read…
CVE-2005-13522005-05-02Cross-site scripting (XSS) vulnerability in the ad.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.
CVE-2005-13512005-05-02The ad.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.
CVE-2005-13502005-05-02The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
CVE-2004-23472004-12-31blog.cgi in Leif M. Wright Web Blog 1.1 and 1.1.5 allows remote attackers to execute arbitrary commands via shell metacharacters such as '|' in the file parame…
CVE-2004-21272004-01-20Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file variable.
CVE-2001-00252001-02-12ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.
CVE-2001-00242001-02-12simplestmail.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the MyEmail parameter.
CVE-2001-00232001-02-12everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter.
CVE-2001-00222001-02-12simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook parameter.