Vulnerabilities (CVE)

Filtered by vendor Ralf S. Engelschall Subscribe
Filtered by product Eperl
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-0458 4 Debian, Mandrakesoft, Ralf S. Engelschall and 1 more 4 Debian Linux, Mandrake Linux, Eperl and 1 more 2024-02-28 7.5 HIGH N/A
Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands.
CVE-2001-0733 1 Ralf S. Engelschall 1 Eperl 2024-02-28 7.5 HIGH N/A
The #sinclude directive in Embedded Perl (ePerl) 2.2.14 and earlier allows a remote attacker to execute arbitrary code by modifying the 'sinclude' file to point to another file that contains a #include directive that references a file that contains the code.
CVE-1999-1437 1 Ralf S. Engelschall 1 Eperl 2024-02-28 7.5 HIGH N/A
ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full pathname of the target file as an argument to bar.phtml.