CVE
CVE-2000-0411
Matt wright · Formmail
- First Reported
- Nov 4, 2026
- Latest Reported
- Nov 4, 2026
CVE Enrichment
- CVSS
- 5.0 MEDIUM
- EPSS
- 7.50%
- EPSS Percentile
- 94.50%
- CISA KEV
- Not listed
Description
Matt Wright's FormMail CGI script allows remote attackers to obtain environmental variables via the env_report parameter.
Technical Details
- CVSS Version
- 2.0
- CNA / NVD Source
- [email protected]
- Published
- 10-May-2000 11:00
- Last Modified
- 17-Jun-2026 04:51
- EPSS Date
- 2026-11-04
CVSS Vector
AV:N /
AC:L /
Au:N /
C:P /
I:N /
A:N
CNA Products / Version Status
- n/a · n/a
Source: CNA · [email protected]
Default status: unknown
n/a — affected
Affected Products / Versions
- matt_wright / formmail
Source: NVD CPE · affected
Version / affected range: 1.6
cpe:2.3:a:matt_wright:formmail:1.6:*:*:*:*:*:*:*
References
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
Last enrichment sync: 05-Nov-2026 18:25
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (1)
- One of the early web application vulnerabilities I remember was CVE-2000-0411 [CVE]. Honeypots See Renewed Scans for Vulnerable Email Scripts