Every CVE Search/ Get API key

CVE-2001-1584

CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary...

7.5 High

CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field.

Exploit likelihood

1.81%Up 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field.

Record
CVE-2001-1584
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field.

Record
CVE-2001-1584
Updated
2026-11-02
EUVDEUVD-2001-1561 No score

CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field.

Record
EUVD-2001-1561
Updated
2026-11-03
GitHub AdvisoriesGHSA-7rxf-5c83-ff48 No score

CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary...

CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field.

Record
GHSA-7rxf-5c83-ff48
Weakness
CWE-20
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2001-1584 is a high vulnerability (CVSS 7.5) in Michael Barretto Cardboard, published December 31, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.81%, the 78th percentile. No source names a fixed version.

References

MoveEnter Open