FO
Product
Formmail
8
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Formmail to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-1777 | – | May 22 | CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response… Affected: 1.92 |
| CVE-2009-1776 | – | May 22 | Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allow remote attackers to inject arbitrary web script or… Affected: through 1.92 |
| CVE-2002-1771 | – | Dec 31 | Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline character followed by CC:, BCC:, or additional TO: fields in… Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +4 more |
| CVE-2002-2109 | – | Dec 31 | Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2) a spoofed referer… Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +4 more |
| CVE-2001-0357 | – | Aug 22 | FormMail.pl in FormMail 1.6 and earlier allows a remote attacker to send anonymous email (spam) by modifying the recipient and message parameters Affected: through 1.6 |
| CVE-2000-0411 | – | May 10 | Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter Affected: 1.6 |
| CVE-1999-0173 | – | Jan 1 | FormMail CGI program can be used by web servers other than the host server that the program resides on Affected: All versions, or not specified |
| CVE-1999-0172 | – | Aug 2 | FormMail CGI program allows remote execution of commands Affected: All versions, or not specified |
Showing 8