Cgiecho

cgiecho

Vendor: Cpanel • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-5616 1Cpanel 2Cgiecho Cgiemail May 13, 2026 Mar 3, 2017 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in cgiemail and cgiecho allows remote attackers to inject arbitrary web script or HTML via the addendum parameter.
CVE-2017-5615 1Cpanel 2Cgiecho Cgiemail May 13, 2026 Mar 3, 2017 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location.
CVE-2017-5613 1Cpanel 2Cgiecho Cgiemail May 13, 2026 Mar 3, 2017 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary code via format string specifiers in a template file.