{"api_version":"1","generated_at":"2026-07-23T05:31:28+00:00","cve":"CVE-2011-2201","urls":{"html":"https://cve.report/CVE-2011-2201","api":"https://cve.report/api/cve/CVE-2011-2201.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-2201","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-2201"},"summary":{"title":"CVE-2011-2201","description":"The Data::FormValidator module 4.66 and earlier for Perl, when untaint_all_constraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass the taint protection mechanism via form input.","state":"PUBLISHED","assigner":"redhat","published_at":"2011-09-14 16:05:23","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2011/06/13/5","name":"http://www.openwall.com/lists/oss-security/2011/06/13/5","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"oss-security - Re: CVE Request -- Data-FormValidator -- Reports invalid field as\n valid when untaint_all_constraints used","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://rt.cpan.org/Public/Bug/Display.html?id=61792","name":"https://rt.cpan.org/Public/Bug/Display.html?id=61792","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Bug #61792 for Data-FormValidator: untainting issue: CVE-2011-2201","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/48167","name":"http://www.securityfocus.com/bid/48167","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"Perl Data::FormValidator Module 'results()' Security Bypass Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=712694","name":"https://bugzilla.redhat.com/show_bug.cgi?id=712694","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"],"title":"Bug 712694 – CVE-2011-2201 perl-Data-FormValidator: Reports invalid field as valid when untaint_all_constraints used","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629511","name":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629511","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"],"title":"#629511 - can report invalid data as valid in untaint mode - Debian Bug report logs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2011/06/12/3","name":"http://www.openwall.com/lists/oss-security/2011/06/12/3","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"],"title":"oss-security - CVE Request -- Data-FormValidator -- Reports invalid field as valid\n when untaint_all_constraints used","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.openwall.com/lists/oss-security/2011/06/13/13","name":"http://www.openwall.com/lists/oss-security/2011/06/13/13","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"],"title":"oss-security - Re: CVE Request -- Data-FormValidator -- Reports\n invalid field as valid when untaint_all_constraints used","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065416.html","name":"http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065416.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Patch"],"title":"[SECURITY] Fedora 16 Update: perl-Data-FormValidator-4.66-6.fc16","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-2201","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-2201","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"1.10","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"1.11","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"1.3","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"1.4","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"1.5","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"1.5.1","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"1.6","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"1.7","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"1.8","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"1.9","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"1.91","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"1.92","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"1.93","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"2.00","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"2.01","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"2.02","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"2.03","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"2.04","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"2.10","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"2.11_01","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"2.11_02","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"2.11_03","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"2.11_04","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.00","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.01","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.10","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.11","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.12","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.13","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.14","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.15","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.49_1","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.50","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.51","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.52","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.53","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.54","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.55","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.56","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.57","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.58","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.59","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.60","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.61","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.62","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"3.63","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.00","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.01","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.02","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.10","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.11","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.12","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.13","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.14","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.20","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.30","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.40","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.49_01","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.50","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.51","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.52","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.53","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.54","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.55","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.56","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.57","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.60","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.61","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.62","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.63","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"4.65","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"1","versionEndIncluding":"4.66","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"mark_stosberg","cpe5":"data\\","cpe6":"\\","cpe7":"formvalidator","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"2201","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"perl","cpe5":"perl","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T22:53:17.470Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"48167","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/48167"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://rt.cpan.org/Public/Bug/Display.html?id=61792"},{"name":"[oss-security] 20110613 Re: CVE Request -- Data-FormValidator -- Reports invalid field as valid when untaint_all_constraints used","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2011/06/13/5"},{"name":"[oss-security] 20110612 CVE Request -- Data-FormValidator -- Reports invalid field as valid when untaint_all_constraints used","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2011/06/12/3"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629511"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=712694"},{"name":"[oss-security] 20110613 Re: CVE Request -- Data-FormValidator -- Reports invalid field as valid when untaint_all_constraints used","tags":["mailing-list","x_refsource_MLIST","x_transferred"],"url":"http://www.openwall.com/lists/oss-security/2011/06/13/13"},{"name":"FEDORA-2011-11680","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065416.html"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"The Data::FormValidator module 4.66 and earlier for Perl, when untaint_all_constraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass the taint protection mechanism via form input."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2011-09-14T15:00:00.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"name":"48167","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/48167"},{"tags":["x_refsource_CONFIRM"],"url":"https://rt.cpan.org/Public/Bug/Display.html?id=61792"},{"name":"[oss-security] 20110613 Re: CVE Request -- Data-FormValidator -- Reports invalid field as valid when untaint_all_constraints used","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2011/06/13/5"},{"name":"[oss-security] 20110612 CVE Request -- Data-FormValidator -- Reports invalid field as valid when untaint_all_constraints used","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2011/06/12/3"},{"tags":["x_refsource_CONFIRM"],"url":"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=629511"},{"tags":["x_refsource_CONFIRM"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=712694"},{"name":"[oss-security] 20110613 Re: CVE Request -- Data-FormValidator -- Reports invalid field as valid when untaint_all_constraints used","tags":["mailing-list","x_refsource_MLIST"],"url":"http://www.openwall.com/lists/oss-security/2011/06/13/13"},{"name":"FEDORA-2011-11680","tags":["vendor-advisory","x_refsource_FEDORA"],"url":"http://lists.fedoraproject.org/pipermail/package-announce/2011-September/065416.html"}]}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2011-2201","datePublished":"2011-09-14T15:00:00.000Z","dateReserved":"2011-05-31T00:00:00.000Z","dateUpdated":"2024-08-06T22:53:17.470Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-09-14 16:05:23","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:*:*:*:*:*:*:*:*","versionEndIncluding":"4.66","matchCriteriaId":"BFABCFBC-0EC9-4DF4-B36E-C657272183A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.3:*:*:*:*:*:*:*","matchCriteriaId":"672D4776-8D5B-4819-8BF3-AEDF26C3D96C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.4:*:*:*:*:*:*:*","matchCriteriaId":"DE0F8CE2-8032-4B42-954A-A2FE17756FD7"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.5:*:*:*:*:*:*:*","matchCriteriaId":"2A1F5875-286A-400B-BD54-C126DBF9208D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.5.1:*:*:*:*:*:*:*","matchCriteriaId":"F4AE171E-7047-4028-8111-FBF69A2CA8BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.6:*:*:*:*:*:*:*","matchCriteriaId":"487D174E-2DE8-43BD-B775-2821D4664FAF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.7:*:*:*:*:*:*:*","matchCriteriaId":"564A8717-1CCE-4210-B371-610B3CF77864"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.8:*:*:*:*:*:*:*","matchCriteriaId":"F1260F48-15C0-4BB3-B7BF-FAE2FBD48730"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.9:*:*:*:*:*:*:*","matchCriteriaId":"AE318DEF-513B-4B8D-A234-BE163F999615"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.10:*:*:*:*:*:*:*","matchCriteriaId":"89D205BE-D742-4835-BA7B-858A1CE1E573"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.11:*:*:*:*:*:*:*","matchCriteriaId":"E52CDBF8-F834-4F34-8D4A-05BDF9F0D72A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.91:*:*:*:*:*:*:*","matchCriteriaId":"2137D5D4-8007-454F-A212-1766B7F439F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.92:*:*:*:*:*:*:*","matchCriteriaId":"76788109-9544-4257-8371-07370FB6D8A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:1.93:*:*:*:*:*:*:*","matchCriteriaId":"405BB5BA-4723-4847-8748-61A69E7F53CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:2.00:*:*:*:*:*:*:*","matchCriteriaId":"131D4215-C4DC-4780-AA5B-06C1FEE61BE2"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:2.01:*:*:*:*:*:*:*","matchCriteriaId":"4AEF3AE5-D0A4-4C68-89DB-696CBB716434"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:2.02:*:*:*:*:*:*:*","matchCriteriaId":"0F844F48-EC40-422A-8088-BFC1647D6A0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:2.03:*:*:*:*:*:*:*","matchCriteriaId":"E4034AF6-877B-477D-9C89-9AF4F5A3B08A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:2.04:*:*:*:*:*:*:*","matchCriteriaId":"18F27023-9062-49BA-A8FC-52DFB1A56E70"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:2.10:*:*:*:*:*:*:*","matchCriteriaId":"1A409D95-DFA5-4A59-BC40-F593E280E007"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:2.11_01:*:*:*:*:*:*:*","matchCriteriaId":"76DCC3E8-9419-4359-ACA9-88B45881BC9F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:2.11_02:*:*:*:*:*:*:*","matchCriteriaId":"225F296B-AA04-426D-85EE-07CF3173F8E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:2.11_03:*:*:*:*:*:*:*","matchCriteriaId":"D2B45194-6487-42A7-AF51-F065E60DF18B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:2.11_04:*:*:*:*:*:*:*","matchCriteriaId":"A4485908-3E21-4223-8349-3FBAD619A217"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.00:*:*:*:*:*:*:*","matchCriteriaId":"8998E587-98CA-4D3B-8388-45F181DAE970"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.01:*:*:*:*:*:*:*","matchCriteriaId":"E98A159C-36EF-4764-849E-C548639BF888"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.10:*:*:*:*:*:*:*","matchCriteriaId":"DCD58054-2DCB-4CAD-8C4E-22D994E59A0F"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.11:*:*:*:*:*:*:*","matchCriteriaId":"E44C0AD3-ACB5-41AD-BFF3-C3423C7438E1"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.12:*:*:*:*:*:*:*","matchCriteriaId":"18E52F34-8A1B-452B-966E-CD553580028B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.13:*:*:*:*:*:*:*","matchCriteriaId":"9CC2BD62-0445-415D-B8BB-37EB70F4358D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.14:*:*:*:*:*:*:*","matchCriteriaId":"50A22B36-721E-4D4F-B37C-52927170029A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.15:*:*:*:*:*:*:*","matchCriteriaId":"1C6C294C-90E6-4150-8976-508693BD3DBD"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.49_1:*:*:*:*:*:*:*","matchCriteriaId":"D60A3C8F-E980-451B-BDF5-5D9A712BC3B8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.50:*:*:*:*:*:*:*","matchCriteriaId":"0D4C0776-F778-47AF-9099-D7567AA72C8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.51:*:*:*:*:*:*:*","matchCriteriaId":"93A9749E-644A-4863-82C9-766AD7CA288D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.52:*:*:*:*:*:*:*","matchCriteriaId":"727FEE1D-23F9-4451-8072-34DDCBCAAE74"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.53:*:*:*:*:*:*:*","matchCriteriaId":"AA70B179-D7EE-472B-882D-474BBBE23699"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.54:*:*:*:*:*:*:*","matchCriteriaId":"51CD2258-08DF-4383-9B0F-6BB15CD5A5E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.55:*:*:*:*:*:*:*","matchCriteriaId":"C4C966AF-A159-4B5B-B0D8-6AD08B8929C6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.56:*:*:*:*:*:*:*","matchCriteriaId":"B3AEBE47-23B4-47A4-8E99-0008400AAF33"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.57:*:*:*:*:*:*:*","matchCriteriaId":"1870B0DC-6BD0-4EFC-8716-772730845ED0"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.58:*:*:*:*:*:*:*","matchCriteriaId":"8D302C63-E567-4552-9850-9EDEF4C9956A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.59:*:*:*:*:*:*:*","matchCriteriaId":"CE55ACEB-ECC0-4F9E-BAEF-3F8F1B4FFC78"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.60:*:*:*:*:*:*:*","matchCriteriaId":"4346B371-A067-45C5-A996-F8E9F6A64335"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.61:*:*:*:*:*:*:*","matchCriteriaId":"FC0B54BA-7C06-40BC-AF06-1FA8DD55EB30"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.62:*:*:*:*:*:*:*","matchCriteriaId":"E4B664DE-93D4-4884-9DF4-5EBA1E9FDF5D"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:3.63:*:*:*:*:*:*:*","matchCriteriaId":"E48EBC0D-2B32-4478-A453-437B4708C3CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.00:*:*:*:*:*:*:*","matchCriteriaId":"EAA8D79F-7FD4-49ED-B862-4C5F9F69E189"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.01:*:*:*:*:*:*:*","matchCriteriaId":"B47A1DEE-DB01-4525-AB1F-0ECB9418FE45"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.02:*:*:*:*:*:*:*","matchCriteriaId":"E055B23E-E478-4CE9-961C-36FAB8A2D6E5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.10:*:*:*:*:*:*:*","matchCriteriaId":"F4C0DB0A-A0C1-47D4-A480-8CD0DA799751"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.11:*:*:*:*:*:*:*","matchCriteriaId":"51229D5C-47E6-4DE6-8980-C9D463FBD767"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.12:*:*:*:*:*:*:*","matchCriteriaId":"519DC991-4D87-4BF1-84ED-DE2C0B541989"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.13:*:*:*:*:*:*:*","matchCriteriaId":"BD26998A-A9A2-4A19-96A4-A63F8565090C"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.14:*:*:*:*:*:*:*","matchCriteriaId":"6487F14B-3779-4612-8582-7E8875425BF6"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.20:*:*:*:*:*:*:*","matchCriteriaId":"7BC665D0-7F02-4A50-AAB6-6D5AB6CE32A9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.30:*:*:*:*:*:*:*","matchCriteriaId":"D91D8001-0F08-4BF6-9140-F39A94F614F5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.40:*:*:*:*:*:*:*","matchCriteriaId":"6D3E7868-5992-491F-A17F-D60A60943912"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.49_01:*:*:*:*:*:*:*","matchCriteriaId":"02FA1232-DBE9-4F7F-A1E4-89E0E2A66F4B"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.50:*:*:*:*:*:*:*","matchCriteriaId":"450FCFE6-BDDD-4654-A730-798B298E6DAA"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.51:*:*:*:*:*:*:*","matchCriteriaId":"95D6EAC7-1215-426D-BBAB-0CDFB2D9D462"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.52:*:*:*:*:*:*:*","matchCriteriaId":"D42D9B8C-5FE3-4987-90D2-13252EF9ADE9"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.53:*:*:*:*:*:*:*","matchCriteriaId":"C9C4526E-EEDE-4A91-B1AD-8F8B70047045"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.54:*:*:*:*:*:*:*","matchCriteriaId":"6DAB3AC5-3629-4A7C-9B97-E463EC58363A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.55:*:*:*:*:*:*:*","matchCriteriaId":"16B7B04C-7CF5-4C34-BFBA-57850A70C97A"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.56:*:*:*:*:*:*:*","matchCriteriaId":"140D6FB5-6EBF-476D-BA63-D75283786EF8"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.57:*:*:*:*:*:*:*","matchCriteriaId":"6EEC6A01-0480-413F-8DE4-CDDF5586C277"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.60:*:*:*:*:*:*:*","matchCriteriaId":"E7F5E661-8B88-42D0-8C50-9F7673C5D0D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.61:*:*:*:*:*:*:*","matchCriteriaId":"698232CE-1461-43A3-9B4E-47698B5F81C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.62:*:*:*:*:*:*:*","matchCriteriaId":"08EF5774-2E9C-42E8-8621-8619D6B9A195"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.63:*:*:*:*:*:*:*","matchCriteriaId":"D12DA159-B0E2-47BA-A75D-E06FB6ED288E"},{"vulnerable":true,"criteria":"cpe:2.3:a:mark_stosberg:data\\:\\:formvalidator:4.65:*:*:*:*:*:*:*","matchCriteriaId":"DBE69C8F-F659-43AE-8A7A-D3D02B2D2FE9"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:perl:perl:*:*:*:*:*:*:*:*","matchCriteriaId":"CB490BCA-8592-4324-BCE3-396BFD647D5E"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"2201","Ordinal":"1","Title":"CVE-2011-2201","CVE":"CVE-2011-2201","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"2201","Ordinal":"1","NoteData":"The Data::FormValidator module 4.66 and earlier for Perl, when untaint_all_constraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass the taint protection mechanism via form input.","Type":"Description","Title":"CVE-2011-2201"},{"CveYear":"2011","CveId":"2201","Ordinal":"2","NoteData":"2011-09-14","Type":"Other","Title":"Published"}]}}}