Vendor/product archive

cpanel / cgiecho CVEs

Beta · best-effort

3 CVEs tagged to cpanel / cgiecho — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to cpanel vendor archive

CVE-2017-5616

Published Mar 3, 2017

Cross-site scripting (XSS) vulnerability in cgiemail and cgiecho allows remote attackers to inject arbitrary web script or HTML via the addendum parameter.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2017-5615

Published Mar 3, 2017

cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2017-5613

Published Mar 3, 2017

Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary code via format string specifiers in a template file.

CVSS 7.8 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1