CGI Security Advisories - Cpan | Ecosyste.ms: Advisories

CGI

Handle Common Gateway Interface requests and responses

View on github.com · View on metacpan.org

Security Advisories for CGI in cpan

over 13 years ago

CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm. CPANSA-CGI-2012-5526

cpan CGI

over 14 years ago

Usage of deprecated FCGI.pm API. CPANSA-CGI-2011-2766

cpan CGI

over 15 years ago

Unspecified vulnerability in CGI.pm 3.50 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unknown vectors. NOTE: this issue exists because of an incomplete fix for CVE-2010-2761. CPANSA-CGI-2010-4411

cpan CGI

over 15 years ago

The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attackers to inject arbitrary HTTP hea... CPANSA-CGI-2010-2761

cpan CGI

over 15 years ago

Non-random MIME boundary. CPANSA-CGI-2010-02

cpan CGI

over 16 years ago

Newlines in headers. CPANSA-CGI-2010-01

cpan CGI

Filter by Severity