CVE-2009-1777

概要

参考情報

• secunia.com/advisories/35068 · Vendor Advisory
• securityfocus.com/archive/1/503446/100/0/threaded
• securityfocus.com/bid/34929
• ush.it/team/ush/hack-formmail_192/adv.txt · Exploit

formmail のその他の脆弱性

• CVE-2009-1776中 4.3Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allow remote attacker…
• CVE-2002-2109高 7.5Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a …
• CVE-2002-1771中 5.0Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline character followed by C…
• CVE-2001-0357高 7.5FormMail.pl in FormMail 1.6 and earlier allows a remote attacker to send anonymous email (spam) by modifying the recipient and message param…
• CVE-2000-0411中 5.0Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter.