Skip to content
OpenAdvisories

Product · EVANK

Web::Passwd

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    Web::Passwd versions through 0.03 for Perl is vulnerable to RCE

    Web::Passwd versions through 0.03 for Perl is vulnerable to RCE. Web::Passwd is a small CGI application for managing htpasswd files using the htpasswd command. The user parameter is not validated or escaped, and is used as the last argument on the command lin…