<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: csmailto</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2002-0752: CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, w</title><link>https://patchthecve.com/cve/CVE-2002-0752.html</link><guid>https://patchthecve.com/cve/CVE-2002-0752.html</guid><pubDate>Tue, 16 Jun 2026 21:58:04 +0000</pubDate><description>MEDIUM 5.0: CGIscript.net csMailto.cgi program exports feedback to a file that is accessible from the web document root, which could allow remote attackers to obtain sensitive information by directly accessing the file.</description></item><item><title>CVE-2002-0751: CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a &quot;spam proxy&quot; and send mail to </title><link>https://patchthecve.com/cve/CVE-2002-0751.html</link><guid>https://patchthecve.com/cve/CVE-2002-0751.html</guid><pubDate>Tue, 16 Jun 2026 21:58:03 +0000</pubDate><description>HIGH 7.5: CGIscript.net csMailto.cgi program allows remote attackers to use csMailto as a &quot;spam proxy&quot; and send mail to arbitrary users via modified (1) form-to, (2) form-from, and (3) form-results parameters.</description></item><item><title>CVE-2002-0750: CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target fi</title><link>https://patchthecve.com/cve/CVE-2002-0750.html</link><guid>https://patchthecve.com/cve/CVE-2002-0750.html</guid><pubDate>Tue, 16 Jun 2026 21:58:03 +0000</pubDate><description>MEDIUM 5.0: CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target filename in the form-attachment field.</description></item><item><title>CVE-2002-0749: CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in t</title><link>https://patchthecve.com/cve/CVE-2002-0749.html</link><guid>https://patchthecve.com/cve/CVE-2002-0749.html</guid><pubDate>Tue, 16 Jun 2026 21:58:03 +0000</pubDate><description>HIGH 7.5: CGIscript.net csMailto.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the form-attachment field.</description></item></channel></rss>