CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-2761

The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input that contains this value, a different vulnerability than CVE-2010-3172.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.027

EPSS Ranking 85.1%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2010-2761

Andy Armstrong » Cgi-Simple » Version: 0.078

cpe:2.3:a:andy_armstrong:cgi-simple:0.078
Andy Armstrong » Cgi-Simple » Version: 0.079

cpe:2.3:a:andy_armstrong:cgi-simple:0.079
Andy Armstrong » Cgi-Simple » Version: 0.080

cpe:2.3:a:andy_armstrong:cgi-simple:0.080
Andy Armstrong » Cgi-Simple » Version: 0.081

cpe:2.3:a:andy_armstrong:cgi-simple:0.081
Andy Armstrong » Cgi-Simple » Version: 0.082

cpe:2.3:a:andy_armstrong:cgi-simple:0.082
Andy Armstrong » Cgi-Simple » Version: 0.83

cpe:2.3:a:andy_armstrong:cgi-simple:0.83
Andy Armstrong » Cgi-Simple » Version: 1.0

cpe:2.3:a:andy_armstrong:cgi-simple:1.0
Andy Armstrong » Cgi-Simple » Version: 1.1

cpe:2.3:a:andy_armstrong:cgi-simple:1.1
Andy Armstrong » Cgi-Simple » Version: 1.1.1

cpe:2.3:a:andy_armstrong:cgi-simple:1.1.1
Andy Armstrong » Cgi-Simple » Version: 1.1.2

cpe:2.3:a:andy_armstrong:cgi-simple:1.1.2
Andy Armstrong » Cgi-Simple » Version: 1.103

cpe:2.3:a:andy_armstrong:cgi-simple:1.103
Andy Armstrong » Cgi-Simple » Version: 1.104

cpe:2.3:a:andy_armstrong:cgi-simple:1.104
Andy Armstrong » Cgi-Simple » Version: 1.105

cpe:2.3:a:andy_armstrong:cgi-simple:1.105
Andy Armstrong » Cgi-Simple » Version: 1.106

cpe:2.3:a:andy_armstrong:cgi-simple:1.106
Andy Armstrong » Cgi-Simple » Version: 1.107

cpe:2.3:a:andy_armstrong:cgi-simple:1.107
Andy Armstrong » Cgi-Simple » Version: 1.108

cpe:2.3:a:andy_armstrong:cgi-simple:1.108
Andy Armstrong » Cgi-Simple » Version: 1.109

cpe:2.3:a:andy_armstrong:cgi-simple:1.109
Andy Armstrong » Cgi-Simple » Version: 1.110

cpe:2.3:a:andy_armstrong:cgi-simple:1.110
Andy Armstrong » Cgi-Simple » Version: 1.111

cpe:2.3:a:andy_armstrong:cgi-simple:1.111
Andy Armstrong » Cgi-Simple » Version: 1.112

cpe:2.3:a:andy_armstrong:cgi-simple:1.112
Andy Armstrong » Cgi.pm » Version: 1.4

cpe:2.3:a:andy_armstrong:cgi.pm:1.4
Andy Armstrong » Cgi.pm » Version: 1.42

cpe:2.3:a:andy_armstrong:cgi.pm:1.42
Andy Armstrong » Cgi.pm » Version: 1.43

cpe:2.3:a:andy_armstrong:cgi.pm:1.43
Andy Armstrong » Cgi.pm » Version: 1.44

cpe:2.3:a:andy_armstrong:cgi.pm:1.44
Andy Armstrong » Cgi.pm » Version: 1.45

cpe:2.3:a:andy_armstrong:cgi.pm:1.45
Andy Armstrong » Cgi.pm » Version: 1.50

cpe:2.3:a:andy_armstrong:cgi.pm:1.50
Andy Armstrong » Cgi.pm » Version: 1.51

cpe:2.3:a:andy_armstrong:cgi.pm:1.51
Andy Armstrong » Cgi.pm » Version: 1.52

cpe:2.3:a:andy_armstrong:cgi.pm:1.52
Andy Armstrong » Cgi.pm » Version: 1.53

cpe:2.3:a:andy_armstrong:cgi.pm:1.53
Andy Armstrong » Cgi.pm » Version: 1.54

cpe:2.3:a:andy_armstrong:cgi.pm:1.54
Andy Armstrong » Cgi.pm » Version: 1.55

cpe:2.3:a:andy_armstrong:cgi.pm:1.55
Andy Armstrong » Cgi.pm » Version: 1.56

cpe:2.3:a:andy_armstrong:cgi.pm:1.56
Andy Armstrong » Cgi.pm » Version: 1.57

cpe:2.3:a:andy_armstrong:cgi.pm:1.57
Andy Armstrong » Cgi.pm » Version: 2.0

cpe:2.3:a:andy_armstrong:cgi.pm:2.0
Andy Armstrong » Cgi.pm » Version: 2.01

cpe:2.3:a:andy_armstrong:cgi.pm:2.01
Andy Armstrong » Cgi.pm » Version: 2.13

cpe:2.3:a:andy_armstrong:cgi.pm:2.13
Andy Armstrong » Cgi.pm » Version: 2.14

cpe:2.3:a:andy_armstrong:cgi.pm:2.14
Andy Armstrong » Cgi.pm » Version: 2.15

cpe:2.3:a:andy_armstrong:cgi.pm:2.15
Andy Armstrong » Cgi.pm » Version: 2.16

cpe:2.3:a:andy_armstrong:cgi.pm:2.16
Andy Armstrong » Cgi.pm » Version: 2.17

cpe:2.3:a:andy_armstrong:cgi.pm:2.17
Andy Armstrong » Cgi.pm » Version: 2.18

cpe:2.3:a:andy_armstrong:cgi.pm:2.18
Andy Armstrong » Cgi.pm » Version: 2.19

cpe:2.3:a:andy_armstrong:cgi.pm:2.19
Andy Armstrong » Cgi.pm » Version: 2.20

cpe:2.3:a:andy_armstrong:cgi.pm:2.20
Andy Armstrong » Cgi.pm » Version: 2.21

cpe:2.3:a:andy_armstrong:cgi.pm:2.21
Andy Armstrong » Cgi.pm » Version: 2.22

cpe:2.3:a:andy_armstrong:cgi.pm:2.22
Andy Armstrong » Cgi.pm » Version: 2.23

cpe:2.3:a:andy_armstrong:cgi.pm:2.23
Andy Armstrong » Cgi.pm » Version: 2.24

cpe:2.3:a:andy_armstrong:cgi.pm:2.24
Andy Armstrong » Cgi.pm » Version: 2.25

cpe:2.3:a:andy_armstrong:cgi.pm:2.25
Andy Armstrong » Cgi.pm » Version: 2.26

cpe:2.3:a:andy_armstrong:cgi.pm:2.26
Andy Armstrong » Cgi.pm » Version: 2.27

cpe:2.3:a:andy_armstrong:cgi.pm:2.27
Andy Armstrong » Cgi.pm » Version: 2.28

cpe:2.3:a:andy_armstrong:cgi.pm:2.28
Andy Armstrong » Cgi.pm » Version: 2.29

cpe:2.3:a:andy_armstrong:cgi.pm:2.29
Andy Armstrong » Cgi.pm » Version: 2.30

cpe:2.3:a:andy_armstrong:cgi.pm:2.30
Andy Armstrong » Cgi.pm » Version: 2.31

cpe:2.3:a:andy_armstrong:cgi.pm:2.31
Andy Armstrong » Cgi.pm » Version: 2.32

cpe:2.3:a:andy_armstrong:cgi.pm:2.32
Andy Armstrong » Cgi.pm » Version: 2.33

cpe:2.3:a:andy_armstrong:cgi.pm:2.33
Andy Armstrong » Cgi.pm » Version: 2.34

cpe:2.3:a:andy_armstrong:cgi.pm:2.34
Andy Armstrong » Cgi.pm » Version: 2.35

cpe:2.3:a:andy_armstrong:cgi.pm:2.35
Andy Armstrong » Cgi.pm » Version: 2.36

cpe:2.3:a:andy_armstrong:cgi.pm:2.36
Andy Armstrong » Cgi.pm » Version: 2.37

cpe:2.3:a:andy_armstrong:cgi.pm:2.37
Andy Armstrong » Cgi.pm » Version: 2.38

cpe:2.3:a:andy_armstrong:cgi.pm:2.38
Andy Armstrong » Cgi.pm » Version: 2.39

cpe:2.3:a:andy_armstrong:cgi.pm:2.39
Andy Armstrong » Cgi.pm » Version: 2.40

cpe:2.3:a:andy_armstrong:cgi.pm:2.40
Andy Armstrong » Cgi.pm » Version: 2.41

cpe:2.3:a:andy_armstrong:cgi.pm:2.41
Andy Armstrong » Cgi.pm » Version: 2.42

cpe:2.3:a:andy_armstrong:cgi.pm:2.42
Andy Armstrong » Cgi.pm » Version: 2.43

cpe:2.3:a:andy_armstrong:cgi.pm:2.43
Andy Armstrong » Cgi.pm » Version: 2.44

cpe:2.3:a:andy_armstrong:cgi.pm:2.44
Andy Armstrong » Cgi.pm » Version: 2.45

cpe:2.3:a:andy_armstrong:cgi.pm:2.45
Andy Armstrong » Cgi.pm » Version: 2.46

cpe:2.3:a:andy_armstrong:cgi.pm:2.46
Andy Armstrong » Cgi.pm » Version: 2.47

cpe:2.3:a:andy_armstrong:cgi.pm:2.47
Andy Armstrong » Cgi.pm » Version: 2.48

cpe:2.3:a:andy_armstrong:cgi.pm:2.48
Andy Armstrong » Cgi.pm » Version: 2.49

cpe:2.3:a:andy_armstrong:cgi.pm:2.49
Andy Armstrong » Cgi.pm » Version: 2.50

cpe:2.3:a:andy_armstrong:cgi.pm:2.50
Andy Armstrong » Cgi.pm » Version: 2.51

cpe:2.3:a:andy_armstrong:cgi.pm:2.51
Andy Armstrong » Cgi.pm » Version: 2.52

cpe:2.3:a:andy_armstrong:cgi.pm:2.52
Andy Armstrong » Cgi.pm » Version: 2.53

cpe:2.3:a:andy_armstrong:cgi.pm:2.53
Andy Armstrong » Cgi.pm » Version: 2.54

cpe:2.3:a:andy_armstrong:cgi.pm:2.54
Andy Armstrong » Cgi.pm » Version: 2.55

cpe:2.3:a:andy_armstrong:cgi.pm:2.55
Andy Armstrong » Cgi.pm » Version: 2.56

cpe:2.3:a:andy_armstrong:cgi.pm:2.56
Andy Armstrong » Cgi.pm » Version: 2.57

cpe:2.3:a:andy_armstrong:cgi.pm:2.57
Andy Armstrong » Cgi.pm » Version: 2.58

cpe:2.3:a:andy_armstrong:cgi.pm:2.58
Andy Armstrong » Cgi.pm » Version: 2.59

cpe:2.3:a:andy_armstrong:cgi.pm:2.59
Andy Armstrong » Cgi.pm » Version: 2.60

cpe:2.3:a:andy_armstrong:cgi.pm:2.60
Andy Armstrong » Cgi.pm » Version: 2.61

cpe:2.3:a:andy_armstrong:cgi.pm:2.61
Andy Armstrong » Cgi.pm » Version: 2.62

cpe:2.3:a:andy_armstrong:cgi.pm:2.62
Andy Armstrong » Cgi.pm » Version: 2.63

cpe:2.3:a:andy_armstrong:cgi.pm:2.63
Andy Armstrong » Cgi.pm » Version: 2.64

cpe:2.3:a:andy_armstrong:cgi.pm:2.64
Andy Armstrong » Cgi.pm » Version: 2.65

cpe:2.3:a:andy_armstrong:cgi.pm:2.65
Andy Armstrong » Cgi.pm » Version: 2.66

cpe:2.3:a:andy_armstrong:cgi.pm:2.66
Andy Armstrong » Cgi.pm » Version: 2.67

cpe:2.3:a:andy_armstrong:cgi.pm:2.67
Andy Armstrong » Cgi.pm » Version: 2.68

cpe:2.3:a:andy_armstrong:cgi.pm:2.68
Andy Armstrong » Cgi.pm » Version: 2.69

cpe:2.3:a:andy_armstrong:cgi.pm:2.69
Andy Armstrong » Cgi.pm » Version: 2.70

cpe:2.3:a:andy_armstrong:cgi.pm:2.70
Andy Armstrong » Cgi.pm » Version: 2.71

cpe:2.3:a:andy_armstrong:cgi.pm:2.71
Andy Armstrong » Cgi.pm » Version: 2.72

cpe:2.3:a:andy_armstrong:cgi.pm:2.72
Andy Armstrong » Cgi.pm » Version: 2.73

cpe:2.3:a:andy_armstrong:cgi.pm:2.73
Andy Armstrong » Cgi.pm » Version: 2.74

cpe:2.3:a:andy_armstrong:cgi.pm:2.74
Andy Armstrong » Cgi.pm » Version: 2.75

cpe:2.3:a:andy_armstrong:cgi.pm:2.75
Andy Armstrong » Cgi.pm » Version: 2.751

cpe:2.3:a:andy_armstrong:cgi.pm:2.751
Andy Armstrong » Cgi.pm » Version: 2.752

cpe:2.3:a:andy_armstrong:cgi.pm:2.752
Andy Armstrong » Cgi.pm » Version: 2.76

cpe:2.3:a:andy_armstrong:cgi.pm:2.76
Andy Armstrong » Cgi.pm » Version: 2.77

cpe:2.3:a:andy_armstrong:cgi.pm:2.77
Andy Armstrong » Cgi.pm » Version: 2.78

cpe:2.3:a:andy_armstrong:cgi.pm:2.78
Andy Armstrong » Cgi.pm » Version: 2.79

cpe:2.3:a:andy_armstrong:cgi.pm:2.79
Andy Armstrong » Cgi.pm » Version: 2.80

cpe:2.3:a:andy_armstrong:cgi.pm:2.80
Andy Armstrong » Cgi.pm » Version: 2.81

cpe:2.3:a:andy_armstrong:cgi.pm:2.81
Andy Armstrong » Cgi.pm » Version: 2.82

cpe:2.3:a:andy_armstrong:cgi.pm:2.82
Andy Armstrong » Cgi.pm » Version: 2.83

cpe:2.3:a:andy_armstrong:cgi.pm:2.83
Andy Armstrong » Cgi.pm » Version: 2.84

cpe:2.3:a:andy_armstrong:cgi.pm:2.84
Andy Armstrong » Cgi.pm » Version: 2.85

cpe:2.3:a:andy_armstrong:cgi.pm:2.85
Andy Armstrong » Cgi.pm » Version: 2.86

cpe:2.3:a:andy_armstrong:cgi.pm:2.86
Andy Armstrong » Cgi.pm » Version: 2.87

cpe:2.3:a:andy_armstrong:cgi.pm:2.87
Andy Armstrong » Cgi.pm » Version: 2.88

cpe:2.3:a:andy_armstrong:cgi.pm:2.88
Andy Armstrong » Cgi.pm » Version: 2.89

cpe:2.3:a:andy_armstrong:cgi.pm:2.89
Andy Armstrong » Cgi.pm » Version: 2.90

cpe:2.3:a:andy_armstrong:cgi.pm:2.90
Andy Armstrong » Cgi.pm » Version: 2.91

cpe:2.3:a:andy_armstrong:cgi.pm:2.91
Andy Armstrong » Cgi.pm » Version: 2.92

cpe:2.3:a:andy_armstrong:cgi.pm:2.92
Andy Armstrong » Cgi.pm » Version: 2.93

cpe:2.3:a:andy_armstrong:cgi.pm:2.93
Andy Armstrong » Cgi.pm » Version: 2.94

cpe:2.3:a:andy_armstrong:cgi.pm:2.94
Andy Armstrong » Cgi.pm » Version: 2.95

cpe:2.3:a:andy_armstrong:cgi.pm:2.95
Andy Armstrong » Cgi.pm » Version: 2.96

cpe:2.3:a:andy_armstrong:cgi.pm:2.96
Andy Armstrong » Cgi.pm » Version: 2.97

cpe:2.3:a:andy_armstrong:cgi.pm:2.97
Andy Armstrong » Cgi.pm » Version: 2.98

cpe:2.3:a:andy_armstrong:cgi.pm:2.98
Andy Armstrong » Cgi.pm » Version: 2.99

cpe:2.3:a:andy_armstrong:cgi.pm:2.99
Andy Armstrong » Cgi.pm » Version: 3.00

cpe:2.3:a:andy_armstrong:cgi.pm:3.00
Andy Armstrong » Cgi.pm » Version: 3.01

cpe:2.3:a:andy_armstrong:cgi.pm:3.01
Andy Armstrong » Cgi.pm » Version: 3.02

cpe:2.3:a:andy_armstrong:cgi.pm:3.02
Andy Armstrong » Cgi.pm » Version: 3.03

cpe:2.3:a:andy_armstrong:cgi.pm:3.03
Andy Armstrong » Cgi.pm » Version: 3.04

cpe:2.3:a:andy_armstrong:cgi.pm:3.04
Andy Armstrong » Cgi.pm » Version: 3.05

cpe:2.3:a:andy_armstrong:cgi.pm:3.05
Andy Armstrong » Cgi.pm » Version: 3.06

cpe:2.3:a:andy_armstrong:cgi.pm:3.06
Andy Armstrong » Cgi.pm » Version: 3.07

cpe:2.3:a:andy_armstrong:cgi.pm:3.07
Andy Armstrong » Cgi.pm » Version: 3.08

cpe:2.3:a:andy_armstrong:cgi.pm:3.08
Andy Armstrong » Cgi.pm » Version: 3.09

cpe:2.3:a:andy_armstrong:cgi.pm:3.09
Andy Armstrong » Cgi.pm » Version: 3.10

cpe:2.3:a:andy_armstrong:cgi.pm:3.10
Andy Armstrong » Cgi.pm » Version: 3.11

cpe:2.3:a:andy_armstrong:cgi.pm:3.11
Andy Armstrong » Cgi.pm » Version: 3.12

cpe:2.3:a:andy_armstrong:cgi.pm:3.12
Andy Armstrong » Cgi.pm » Version: 3.13

cpe:2.3:a:andy_armstrong:cgi.pm:3.13
Andy Armstrong » Cgi.pm » Version: 3.14

cpe:2.3:a:andy_armstrong:cgi.pm:3.14
Andy Armstrong » Cgi.pm » Version: 3.15

cpe:2.3:a:andy_armstrong:cgi.pm:3.15
Andy Armstrong » Cgi.pm » Version: 3.16

cpe:2.3:a:andy_armstrong:cgi.pm:3.16
Andy Armstrong » Cgi.pm » Version: 3.17

cpe:2.3:a:andy_armstrong:cgi.pm:3.17
Andy Armstrong » Cgi.pm » Version: 3.18

cpe:2.3:a:andy_armstrong:cgi.pm:3.18
Andy Armstrong » Cgi.pm » Version: 3.19

cpe:2.3:a:andy_armstrong:cgi.pm:3.19
Andy Armstrong » Cgi.pm » Version: 3.20

cpe:2.3:a:andy_armstrong:cgi.pm:3.20
Andy Armstrong » Cgi.pm » Version: 3.21

cpe:2.3:a:andy_armstrong:cgi.pm:3.21
Andy Armstrong » Cgi.pm » Version: 3.22

cpe:2.3:a:andy_armstrong:cgi.pm:3.22
Andy Armstrong » Cgi.pm » Version: 3.23

cpe:2.3:a:andy_armstrong:cgi.pm:3.23
Andy Armstrong » Cgi.pm » Version: 3.24

cpe:2.3:a:andy_armstrong:cgi.pm:3.24
Andy Armstrong » Cgi.pm » Version: 3.25

cpe:2.3:a:andy_armstrong:cgi.pm:3.25
Andy Armstrong » Cgi.pm » Version: 3.26

cpe:2.3:a:andy_armstrong:cgi.pm:3.26
Andy Armstrong » Cgi.pm » Version: 3.27

cpe:2.3:a:andy_armstrong:cgi.pm:3.27
Andy Armstrong » Cgi.pm » Version: 3.28

cpe:2.3:a:andy_armstrong:cgi.pm:3.28
Andy Armstrong » Cgi.pm » Version: 3.29

cpe:2.3:a:andy_armstrong:cgi.pm:3.29
Andy Armstrong » Cgi.pm » Version: 3.30

cpe:2.3:a:andy_armstrong:cgi.pm:3.30
Andy Armstrong » Cgi.pm » Version: 3.31

cpe:2.3:a:andy_armstrong:cgi.pm:3.31
Andy Armstrong » Cgi.pm » Version: 3.32

cpe:2.3:a:andy_armstrong:cgi.pm:3.32
Andy Armstrong » Cgi.pm » Version: 3.33

cpe:2.3:a:andy_armstrong:cgi.pm:3.33
Andy Armstrong » Cgi.pm » Version: 3.34

cpe:2.3:a:andy_armstrong:cgi.pm:3.34
Andy Armstrong » Cgi.pm » Version: 3.35

cpe:2.3:a:andy_armstrong:cgi.pm:3.35
Andy Armstrong » Cgi.pm » Version: 3.36

cpe:2.3:a:andy_armstrong:cgi.pm:3.36
Andy Armstrong » Cgi.pm » Version: 3.37

cpe:2.3:a:andy_armstrong:cgi.pm:3.37
Andy Armstrong » Cgi.pm » Version: 3.38

cpe:2.3:a:andy_armstrong:cgi.pm:3.38
Andy Armstrong » Cgi.pm » Version: 3.39

cpe:2.3:a:andy_armstrong:cgi.pm:3.39
Andy Armstrong » Cgi.pm » Version: 3.40

cpe:2.3:a:andy_armstrong:cgi.pm:3.40
Andy Armstrong » Cgi.pm » Version: 3.41

cpe:2.3:a:andy_armstrong:cgi.pm:3.41
Andy Armstrong » Cgi.pm » Version: 3.42

cpe:2.3:a:andy_armstrong:cgi.pm:3.42
Andy Armstrong » Cgi.pm » Version: 3.43

cpe:2.3:a:andy_armstrong:cgi.pm:3.43
Andy Armstrong » Cgi.pm » Version: 3.44

cpe:2.3:a:andy_armstrong:cgi.pm:3.44
Andy Armstrong » Cgi.pm » Version: 3.45

cpe:2.3:a:andy_armstrong:cgi.pm:3.45
Andy Armstrong » Cgi.pm » Version: 3.46

cpe:2.3:a:andy_armstrong:cgi.pm:3.46
Andy Armstrong » Cgi.pm » Version: 3.47

cpe:2.3:a:andy_armstrong:cgi.pm:3.47
Andy Armstrong » Cgi.pm » Version: 3.48

cpe:2.3:a:andy_armstrong:cgi.pm:3.48
Andy Armstrong » Cgi.pm » Version: 3.49

cpe:2.3:a:andy_armstrong:cgi.pm:3.49

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-2761

Products

Pricing

Contact Us