Matt Wright Formmail
8 CVEs affecting Matt Wright Formmail. Latest disclosed: 2009-05-22. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2009-1777 | | 2009-05-22 | CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and co… | |
CVE-2009-1776 | | 2009-05-22 | Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allow remote attackers to inject arbitra… | |
CVE-2002-2109 | | 2002-12-31 | Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2)… | |
CVE-2002-1771 | | 2002-12-31 | Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline character followed by CC:, BCC:, or additi… | |
CVE-2001-0357 | | 2001-08-22 | FormMail.pl in FormMail 1.6 and earlier allows a remote attacker to send anonymous email (spam) by modifying the recipient and message parameters. | |
CVE-2000-0411 | | 2000-05-10 | Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter. | |
CVE-1999-0173 | | 1997-01-01 | FormMail CGI program can be used by web servers other than the host server that the program resides on. | |
CVE-1999-0172 | | 1995-08-02 | FormMail CGI program allows remote execution of commands. |