CVE-2009-4866 | | | 2010-05-11 | Cross-site scripting (XSS) vulnerability in search.cgi in Matt's Script Archive (MSA) Simple Search 1.0 allows remote attackers to inject arbitrary web script… |
CVE-2009-1777 | | | 2009-05-22 | CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and co… |
CVE-2009-1776 | | | 2009-05-22 | Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allow remote attackers to inject arbitra… |
CVE-2006-1698 | | | 2006-04-11 | Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) url, (2) ci… |
CVE-2006-1697 | | | 2006-04-11 | Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) Your Name… |
CVE-2003-1237 | | | 2003-12-31 | Cross-site scripting vulnerability (XSS) in WWWBoard 2.0A2.1 and earlier allows remote attackers to inject arbitrary HTML or web script via a message post. |
CVE-2002-2109 | | | 2002-12-31 | Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2)… |
CVE-2002-1771 | | | 2002-12-31 | Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline character followed by CC:, BCC:, or additi… |
CVE-2001-0937 | | | 2001-11-30 | PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) recipient or (2) pgpuserid parameters. |
CVE-2001-0357 | | | 2001-08-22 | FormMail.pl in FormMail 1.6 and earlier allows a remote attacker to send anonymous email (spam) by modifying the recipient and message parameters. |
CVE-2000-0411 | | | 2000-05-10 | Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter. |
CVE-1999-1051 | | | 1999-11-16 | Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ dir… |
CVE-1999-1050 | | | 1999-11-12 | Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_mes… |
CVE-1999-0954 | | | 1999-09-16 | WWWBoard has a default username and default password. |
CVE-1999-0953 | | | 1999-09-16 | WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers. |
CVE-1999-1053 | | | 1999-09-13 | guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbitrary comma… |
CVE-1999-1377 | | | 1999-09-09 | Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter. |
CVE-1999-0930 | | | 1998-09-03 | wwwboard allows a remote attacker to delete message board articles via a malformed argument. |
CVE-1999-1479 | | | 1998-06-24 | The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters. |
CVE-1999-0173 | | | 1997-01-01 | FormMail CGI program can be used by web servers other than the host server that the program resides on. |
CVE-1999-0172 | | | 1995-08-02 | FormMail CGI program allows remote execution of commands. |