← Back

Ranson Johnson

ranson_johnson

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Mailform
mailform

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Ranson Johnson
1Mailto Cgi Script
Apr 16, 2026
Nov 14, 2000
N/A· v4
N/A· v3
7.5 HIGH· v2
The mailto CGI script allows remote attacker to execute arbitrary commands via shell metacharacters in the emailadd form field.
1Ranson Johnson
1Mailform
Apr 16, 2026
Nov 14, 2000
N/A· v4
N/A· v3
5.0 MEDIUM· v2
mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in the XX-attach_file parameter, which MailForm then sends to the attacker.