Ralf S. Engelschall » Eperl : Security Vulnerabilities, CVEs, CVSS score >= 3
The #sinclude directive in Embedded Perl (ePerl) 2.2.14 and earlier allows a remote attacker to execute arbitrary code by modifying the 'sinclude' file to point to another file that contains a #include directive that references a file that contains the code.
Max CVSS
7.5
EPSS Score
1.93%
Published
2001-10-18
Updated
2017-10-10
Multiple buffer overflows in ePerl before 2.2.14-0.7 allow local and remote attackers to execute arbitrary commands.
Max CVSS
7.5
EPSS Score
0.73%
Published
2001-06-27
Updated
2017-12-19
ePerl 2.2.12 allows remote attackers to read arbitrary files and possibly execute certain commands by specifying a full pathname of the target file as an argument to bar.phtml.
Max CVSS
7.5
EPSS Score
4.14%
Published
1998-07-07
Updated
2016-10-18
3 vulnerabilities found