This CPE summary could be partial or incomplete. Please contact us for a detailed listing.

Summary

Detail
Vendor Matts Whois First view 1999-11-09
Product Matts Whois Last view 2008-02-27
Version Type Application
Update  
Edition  
Language  
Sofware Edition  
Target Software  
Target Hardware  
Other  

Activity : Overall

COMMON PLATFORM ENUMERATION: Repartition per Version

CPE Name Affected CVE
cpe:2.3:a:matts_whois:matts_whois:1.0:*:*:*:*:*:*:* 1
cpe:2.3:a:matts_whois:matts_whois:*:*:*:*:*:*:*:* 1

Related : CVE

  Date Alert Description
4.3 2008-02-27 CVE-2008-1041

Cross-site scripting (XSS) vulnerability in mwhois.php in Matt Wilson Matt's Whois (MWhois) allows remote attackers to inject arbitrary web script or HTML via the domain parameter.

7.5 1999-11-09 CVE-1999-0984

Matt's Whois program whois.cgi allows remote attackers to execute commands via shell metacharacters in the domain entry.

CWE : Common Weakness Enumeration

%idName
100% (1) CWE-79 Failure to Preserve Web Page Structure ('Cross-site Scripting')

Open Source Vulnerability Database (OSVDB)

id Description
42134 Matt's Whois mwhois.php domain Parameter XSS
9772 Matt's Whois whois.cgi Domain Entry Arbitrary Command Execution