Approved changes feed: RSS · Atom

cpe:2.3:a:cpanel:cgiemail:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorCpanel (dcbfcc34-bb9d-542a-b6e9-b8eb62c9bd28)
ProductCgiemail (302b9f02-8479-5ec4-8ab1-932547194760)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/finbar-crago/cgiemail-exploit purl2cpe 2026-06-01 10:16:59.709694

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-5616 vulnerable 2026-06-08 05:09:47.358031 Details available
Cross-site scripting (XSS) vulnerability in cgiemail and cgiecho allows remote attackers to inject arbitrary web script or HTML via the addendum parameter.
Published: 2017-03-03T15:00:00.000Z
Updated: 2024-08-05T15:04:15.369Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5615 vulnerable 2026-06-08 05:09:47.357649 Details available
cgiemail and cgiecho allow remote attackers to inject HTTP headers via a newline character in the redirect location.
Published: 2017-03-03T15:00:00.000Z
Updated: 2024-08-05T15:04:15.361Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5613 vulnerable 2026-06-08 05:09:47.355604 Details available
Format string vulnerability in cgiemail and cgiecho allows remote attackers to execute arbitrary code via format string specifiers in a template file.
Published: 2017-03-03T15:00:00.000Z
Updated: 2024-08-05T15:04:15.489Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.