text.cgi vulnerabilities and fixes

Recent CVEs affecting text.cgi, with upgrade or downgrade steps. 3 tracked.

Also searched as: text cgi, textcgi.

text.cgi has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-05-02. Highest priority: CVE-2005-1358 (score 46/100).

• CVE-2005-1359 MEDIUM 4.3 MITIGATE Cross-site scripting (XSS) vulnerability in text.cgi script allows remote attackers to inject arbitrary web sc
• CVE-2005-1358 HIGH 7.5 MITIGATE text.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument
• CVE-2005-1357 MEDIUM 5.0 MITIGATE text.cgi script allows remote attackers to read arbitrary files via a full pathname in the argument.

FAQ

How do I fix text.cgi vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is text.cgi being exploited right now?

None of the tracked text.cgi CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which text.cgi CVE should I patch first?

CVE-2005-1358 currently ranks highest (46/100): text.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.

RSS feed for text.cgi · ← Back to latest CVEs