Skip to content
Noroxi

matt wright records

21 published records for vendor matt wright.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 4.8%
Pre-auth RCE
5
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    21 records
    • CVE-1999-1053
      56Plan

      guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to exec

      HighCVSS 7.5WeaponizedEPSS 85%

      apache · http serverSep 13, 1999

    • CVE-1999-1479
      44Plan

      The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters.

      CriticalCVSS 10.0Proof of conceptEPSS 11%

      matt wright · textcounterJun 24, 1998

    • CVE-1999-0953
      43Plan

      WWWBoard stores encrypted passwords in a password file that is under the web root and thus accessible by remote attackers.

      CriticalCVSS 10.0Proof of conceptEPSS 8%

      matt wright · wwwboardSep 16, 1999

    • CVE-1999-0172
      31Monitor

      FormMail CGI program allows remote execution of commands.

      HighCVSS 7.5No exploitEPSS 3%

      matt wright · formmailAug 2, 1995

    • CVE-2002-2109
      31Monitor

      Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a

      HighCVSS 7.5No exploitEPSS 2%

      matt wright · formmailDec 31, 2002

    • CVE-2001-0937
      31Monitor

      PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) recipient or (2) pgpuserid paramet

      HighCVSS 7.5No exploitEPSS 1%

      matt wright · pgpmail.plNov 30, 2001

    • CVE-2001-0357
      30Monitor

      FormMail.pl in FormMail 1.6 and earlier allows a remote attacker to send anonymous email (spam) by modifying the recipient and message param

      HighCVSS 7.5No exploitEPSS 1%

      matt wright · formmailAug 22, 2001

    • CVE-1999-0954
      30Monitor

      WWWBoard has a default username and default password.

      HighCVSS 7.5No exploitEPSS 1%

      matt wright · wwwboardSep 16, 1999

    • CVE-1999-1050
      22Monitor

      Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a ..

      MediumCVSS 5.0Proof of conceptEPSS 7%

      matt wright · formhandler.cgiNov 12, 1999

    • CVE-2000-0411
      22Monitor

      Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter.

      MediumCVSS 5.0Proof of conceptEPSS 7%

      matt wright · formmailMay 10, 2000

    • CVE-1999-0173
      21Monitor

      FormMail CGI program can be used by web servers other than the host server that the program resides on.

      MediumCVSS 5.0Proof of conceptEPSS 4%

      matt wright · formmailJan 1, 1997

    • CVE-1999-1377
      21Monitor

      Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a ..

      MediumCVSS 5.0No exploitEPSS 2%

      matt wright · download.cgiSep 9, 1999

    • CVE-2009-1777
      21Monitor

      CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers to inject arbitrary

      MediumCVSS 5.0Proof of conceptEPSS 1%

      matt wright · formmailMay 22, 2009

    • CVE-1999-0930
      20Monitor

      wwwboard allows a remote attacker to delete message board articles via a malformed argument.

      MediumCVSS 5.0No exploitEPSS 1%

      matt wright · wwwboardSep 3, 1998

    • CVE-1999-1051
      20Monitor

      Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts acce

      MediumCVSS 5.0No exploitEPSS 1%

      matt wright · formhandler.cgiNov 16, 1999

    • CVE-2002-1771
      20Monitor

      Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline character followed by C

      MediumCVSS 5.0No exploitEPSS 1%

      matt wright · formmailDec 31, 2002

    • CVE-2006-1697
      18Monitor

      Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via

      MediumCVSS 4.3Proof of conceptEPSS 2%

      matt wright · matt wright guestbookApr 11, 2006

    • CVE-2003-1237
      18Monitor

      Cross-site scripting vulnerability (XSS) in WWWBoard 2.0A2.1 and earlier allows remote attackers to inject arbitrary HTML or web script via

      MediumCVSS 4.3No exploitEPSS 1%

      matt wright · wwwboardDec 31, 2003

    • CVE-2009-1776
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allow remote attacker

      MediumCVSS 4.3Proof of conceptEPSS 1%

      matt wright · formmailMay 22, 2009

    • CVE-2006-1698
      17Monitor

      Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via

      MediumCVSS 4.3No exploitEPSS 1%

      matt wright · matt wright guestbookApr 11, 2006

    • CVE-2009-4866
      17Monitor

      Cross-site scripting (XSS) vulnerability in search.cgi in Matt's Script Archive (MSA) Simple Search 1.0 allows remote attackers to inject ar

      MediumCVSS 4.3No exploitEPSS 1%

      matt wright · simple searchMay 11, 2010