CG
Product
Cgiecho
3
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add Cgiecho to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-5613 | 7.8 | Mar 3 | Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary code via format string specifiers in a template file Affected: All versions, or not specified |
| CVE-2017-5616 | 6.1 | Mar 3 | Cross-site scripting (XSS) vulnerability in cgiemail and cgiecho allows remote attackers to inject arbitrary web script or HTML via the addendum parameter Affected: All versions, or not specified |
| CVE-2017-5615 | 6.1 | Mar 3 | cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location Affected: All versions, or not specified |
Showing 3
