CVE Tools
Track your stack

Leif-m-wright

12 CVEs tracked since 2001. Since Feb 2001, none of them reached CISA KEV.

Leif-m-wright CVEs per month

Feb 2001 to Feb 2006. Point at a month, or focus the strip and use the arrow keys.
Leif-m-wright CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2001-0240
2001-03null or fewer
2001-04null or fewer
2001-05null or fewer
2001-06null or fewer
2001-07null or fewer
2001-08null or fewer
2001-09null or fewer
2001-10null or fewer
2001-11null or fewer
2001-12null or fewer
2002-01null or fewer
2002-02null or fewer
2002-03null or fewer
2002-04null or fewer
2002-05null or fewer
2002-06null or fewer
2002-07null or fewer
2002-08null or fewer
2002-09null or fewer
2002-10null or fewer
2002-11null or fewer
2002-12null or fewer
2003-01null or fewer
2003-02null or fewer
2003-03null or fewer
2003-04null or fewer
2003-05null or fewer
2003-06null or fewer
2003-07null or fewer
2003-08null or fewer
2003-09null or fewer
2003-10null or fewer
2003-11null or fewer
2003-12null or fewer
2004-01null or fewer
2004-02null or fewer
2004-03null or fewer
2004-04null or fewer
2004-05null or fewer
2004-06null or fewer
2004-07null or fewer
2004-08null or fewer
2004-09null or fewer
2004-10null or fewer
2004-11null or fewer
2004-12null or fewer
2005-01null or fewer
2005-02null or fewer
2005-03null or fewer
2005-0430
2005-05null or fewer
2005-06null or fewer
2005-07null or fewer
2005-0810
2005-09null or fewer
2005-10null or fewer
2005-11null or fewer
2005-12null or fewer
2006-01null or fewer
2006-0240

Products

The products that kept showing up in Leif-m-wright's monthly top three, with their CVEs summed over those months.

  1. Web Blog52 months
  2. Ad.cgi42 months
  3. Everythingform.cgi11 month
  4. Simplestguest.cgi11 month

Latest CVEs

The 13 most recently published vulnerabilities affecting Leif-m-wright.

  1. CVE-2006-0845Leif M. Wright's Blog 3.5 allows remote authenticated users with administrative privileges to execute arbitrary programs, including shell commands, by configuring the sendmail path to a malicious p...6.5
  2. CVE-2006-0846Multiple cross-site scripting (XSS) vulnerabilities in Leif M. Wright's Blog 3.5 allow remote attackers to inject arbitrary web script or HTML via the (1) Referer and (2) User-Agent HTTP headers, w...4.3
  3. CVE-2006-0844Leif M. Wright's Blog 3.5 does not make a password comparison when authenticating an administrator via a cookie, which allows remote attackers to bypass login authentication, probably by setting th...7.5
  4. CVE-2006-0843Leif M. Wright's Blog 3.5 stores the config file and other txt files under the web root with insufficient access control, which allows remote attackers to read the administrator's password.5.0
  5. CVE-2004-2347blog.cgi in Leif M. Wright Web Blog 1.1 and 1.1.5 allows remote attackers to execute arbitrary commands via shell metacharacters such as '|' in the file parameter of ViewFile requests.7.5
  6. CVE-2004-2127Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file variable.5.0
  7. CVE-2005-1352Cross-site scripting (XSS) vulnerability in the ad.cgi script allows remote attackers to inject arbitrary web script or HTML via the argument.4.3
  8. CVE-2005-1350The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.5.0
  9. CVE-2005-1351The ad.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.7.5
  10. CVE-2001-0024simplestmail.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the MyEmail parameter.10.0
  11. CVE-2001-0022simplestguest.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the guestbook parameter.10.0
  12. CVE-2001-0025ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.10.0
  13. CVE-2001-0023everythingform.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacters in the config parameter.10.0

The record

Peak rank
#2 in Feb 2001
Busiest month shown
Feb 2001, 4 CVEs
Months with a KEV entry
0 since Feb 2001
Monthly snapshots
4 since 2001
Leif-m-wright's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store