PatchTheCVEad.cgi vulnerabilities and fixes
Recent CVEs affecting ad.cgi, with upgrade or downgrade steps. 4 tracked.
Also searched as: ad cgi, adcgi.
ad.cgi has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-05-02. Highest priority: CVE-2001-0025 (score 64/100).
- CVE-2005-1352 MEDIUM 4.3 MITIGATE Cross-site scripting (XSS) vulnerability in the ad.cgi script allows remote attackers to inject arbitrary web
- CVE-2005-1351 HIGH 7.5 MITIGATE The ad.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argume
- CVE-2005-1350 MEDIUM 5.0 MITIGATE The ad.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.
- CVE-2001-0025 HIGH 10.0 DOWNGRADE ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacte
FAQ
How do I fix ad.cgi vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ad.cgi being exploited right now?
None of the tracked ad.cgi CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ad.cgi CVE should I patch first?
CVE-2001-0025 currently ranks highest (64/100): ad.cgi CGI program by Leif Wright allows remote attackers to execute arbitrary commands via shell metacharacte.