Andy Armstrong vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Andy Armstrong products: 1 record(s), with severity, exploitation and fixes.

Cgi.pm 1 Cgi-simple 1

Exploited only (KEV) →

CVE-2010-4410 Medium · 4.3 CWE-94 Dec 6, 2010

CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm...

CRLF injection vulnerability in the header function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors related to non-whitespace characters preceded by newline characters, a different vulnerability than CVE-2010-2761 and CVE-2010-3172.