Andy Armstrong Cgi.pm vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Andy Armstrong Cgi.pm: 1 record(s), with affected versions and fixes.
cpe:2.3:a:andy_armstrong:cgi.pm

CVE-2010-4410 Medium · 4.3 CWE-94 Dec 6, 2010

CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm...

CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline characters, a different vulnerability than CVE-2010-2761 and CVE-2010-3172.