CVE Tools
Track your stack

Matt-wright

18 CVEs tracked since 1999. Since Sep 1999, none of them reached CISA KEV.

Matt-wright CVEs per month

Sep 1999 to May 2010. Point at a month, or focus the strip and use the arrow keys.
Matt-wright CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
1999-0920
1999-10null or fewer
1999-11null or fewer
1999-12null or fewer
2000-0110
2000-02null or fewer
2000-03null or fewer
2000-04null or fewer
2000-05null or fewer
2000-06null or fewer
2000-0710
2000-08null or fewer
2000-09null or fewer
2000-1010
2000-11null or fewer
2000-12null or fewer
2001-01null or fewer
2001-02null or fewer
2001-03null or fewer
2001-04null or fewer
2001-05null or fewer
2001-06null or fewer
2001-0710
2001-08null or fewer
2001-0950
2001-10null or fewer
2001-11null or fewer
2001-12null or fewer
2002-01null or fewer
2002-0210
2002-0310
2002-04null or fewer
2002-05null or fewer
2002-06null or fewer
2002-07null or fewer
2002-08null or fewer
2002-09null or fewer
2002-10null or fewer
2002-11null or fewer
2002-12null or fewer
2003-01null or fewer
2003-02null or fewer
2003-03null or fewer
2003-04null or fewer
2003-05null or fewer
2003-06null or fewer
2003-07null or fewer
2003-08null or fewer
2003-09null or fewer
2003-10null or fewer
2003-11null or fewer
2003-12null or fewer
2004-01null or fewer
2004-02null or fewer
2004-03null or fewer
2004-04null or fewer
2004-05null or fewer
2004-06null or fewer
2004-07null or fewer
2004-08null or fewer
2004-09null or fewer
2004-10null or fewer
2004-11null or fewer
2004-12null or fewer
2005-01null or fewer
2005-02null or fewer
2005-03null or fewer
2005-04null or fewer
2005-05null or fewer
2005-06null or fewer
2005-07null or fewer
2005-08null or fewer
2005-09null or fewer
2005-10null or fewer
2005-11null or fewer
2005-12null or fewer
2006-01null or fewer
2006-02null or fewer
2006-03null or fewer
2006-0420
2006-05null or fewer
2006-06null or fewer
2006-07null or fewer
2006-08null or fewer
2006-09null or fewer
2006-10null or fewer
2006-11null or fewer
2006-12null or fewer
2007-01null or fewer
2007-02null or fewer
2007-03null or fewer
2007-04null or fewer
2007-05null or fewer
2007-06null or fewer
2007-07null or fewer
2007-08null or fewer
2007-09null or fewer
2007-10null or fewer
2007-11null or fewer
2007-12null or fewer
2008-01null or fewer
2008-02null or fewer
2008-03null or fewer
2008-04null or fewer
2008-05null or fewer
2008-06null or fewer
2008-07null or fewer
2008-08null or fewer
2008-09null or fewer
2008-10null or fewer
2008-11null or fewer
2008-12null or fewer
2009-01null or fewer
2009-02null or fewer
2009-03null or fewer
2009-04null or fewer
2009-0520
2009-06null or fewer
2009-07null or fewer
2009-08null or fewer
2009-09null or fewer
2009-10null or fewer
2009-11null or fewer
2009-12null or fewer
2010-01null or fewer
2010-02null or fewer
2010-03null or fewer
2010-04null or fewer
2010-0510

Products

The products that kept showing up in Matt-wright's monthly top three, with their CVEs summed over those months.

  1. Formmail64 months
  2. Matt Wright Guestbook32 months
  3. Wwwboard33 months
  4. Formhandler.cgi21 month
  5. Download.cgi11 month
  6. Pgpmail.pl11 month
  7. Simple Search11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Matt-wright.

  1. CVE-2023-49438An open redirect vulnerability in the python package Flask-Security-Too <=5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter o...6.1
  2. CVE-2009-4866Cross-site scripting (XSS) vulnerability in search.cgi in Matt's Script Archive (MSA) Simple Search 1.0 allows remote attackers to inject arbitrary web script or HTML via the terms parameter. NOTE...4.3
  3. CVE-2009-1777CRLF injection vulnerability in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks ...5.0
  4. CVE-2009-1776Multiple cross-site scripting (XSS) vulnerabilities in FormMail.pl in Matt Wright FormMail 1.92, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via javascript: ...4.3
  5. CVE-2006-1697Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) Your Name, (2) E-Mail, or (3) Comments fields whe...4.3
  6. CVE-2006-1698Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) url, (2) city, (3) state, or (4) country paramete...4.3
  7. CVE-2002-2109Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2) a spoofed referer with a trusted domai...7.5
  8. CVE-2002-1771Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline character followed by CC:, BCC:, or additional TO: fields in the email and realn...5.0
  9. CVE-1999-0930wwwboard allows a remote attacker to delete message board articles via a malformed argument.5.0
  10. CVE-2001-0937PGPMail.pl 1.31 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) recipient or (2) pgpuserid parameters.7.5
  11. CVE-1999-1050Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachment parameter, or (...5.0
  12. CVE-1999-1053guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache...7.5
  13. CVE-1999-1051Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers ...5.0
  14. CVE-1999-1479The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters.10.0
  15. CVE-1999-1377Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.5.0

The record

Peak rank
#19 in Sep 2001
Busiest month shown
Sep 2001, 5 CVEs
Months with a KEV entry
0 since Sep 1999
Monthly snapshots
11 since 1999
Matt-wright's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store