Yngve Svendsen Gnatsweb vulnerabilities

2 known vulnerabilities affecting yngve_svendsen/gnatsweb.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2007-2808MEDIUMCVSS 4.3v4.002007-05-22

CVE-2007-2808 [MEDIUM] CVE-2007-2808: Cross-site scripting (XSS) vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows rem Cross-site scripting (XSS) vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote attackers to inject arbitrary web script or HTML via the database parameter.

CVE-2001-0808CRITICALCVSS 10.0v2.7_betav2.8.0+2 more2001-12-06

CVE-2001-0808 [CRITICAL] CVE-2001-0808: gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_file parameter.