Vendor/product archive

andy_armstrong / cgi.pm CVEs

Beta · best-effort

4 CVEs tagged to andy_armstrong / cgi.pm — 0 Critical, 0 High, 4 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to andy_armstrong vendor archive

CVE-2012-5526

Published Nov 21, 2012

CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into resp…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2010-4411

Published Dec 6, 2010

Unspecified vulnerability in CGI.pm 3.50 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unknown vectors. NOT…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2010-4410

Published Dec 6, 2010

CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP h…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2010-2761

Published Dec 6, 2010

The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-re…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1