VendorsMatt Wrightformmailany version
Vulnerabilities

Matt Wright Formmail any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-1999-0172
FormMail CGI program allows remote execution of commands.
Published 1999-09-29 · Modified
7.5EPSS 0.034
CVE-2001-0357
FormMail.pl in FormMail 1.6 and earlier allows a remote attacker to send anonymous email (spam) by modifying the recipient and message parameters.
Published 2001-07-27 · Modified
7.5EPSS 0.014
CVE-1999-0173
FormMail CGI program can be used by web servers other than the host server that the program resides on.
Published 1999-09-29 · Modified
5.01 PoCEPSS 0.049
CVE-2009-1776
Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via javascript: URIs in the (1) request and (2) return_link_url parameters.
Published 2009-05-22 · Modified
4.31 PoCEPSS 0.015