Yngve Svendsen » Gnatsweb : Security Vulnerabilities, CVEs,
Cross-site scripting (XSS) vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote attackers to inject arbitrary web script or HTML via the database parameter.
Max CVSS
4.3
EPSS Score
0.62%
Published
2007-05-22
Updated
2017-07-29
gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_file parameter.
Max CVSS
10.0
EPSS Score
8.11%
Published
2001-12-06
Updated
2017-12-19
2 vulnerabilities found