Re^4: Sending a mail with Perl, nah.. the same and same question...

Can you give some example for malicious scripts? And how to check it or block it?

Comment on Re^4: Sending a mail with Perl, nah.. the same and same question...

Replies are listed 'Best First'.
Re^5: Sending a mail with Perl, nah.. the same and same question... by marto (Cardinal) on Mar 29, 2012 at 11:27 UTC
A famous expolitable formmail script would be formmail.pl from Matt's_Script_Archive, this entry provides links to articles discussing how formail.pl could be exploited. For an alternative see http://nms-cgi.sourceforge.net/, which also has further discussion of the problems and solutions. See Ovid's CGI Course for web based security do's and dont's, as well as Web Programming from the tutorials section of this site. Update: Fixed link to tutorials, thanks Corion.	[reply]

Replies are listed 'Best First'.

Re^5: Sending a mail with Perl, nah.. the same and same question...
by marto (Cardinal) on Mar 29, 2012 at 11:27 UTC

A famous expolitable formmail script would be formmail.pl from Matt's_Script_Archive, this entry provides links to articles discussing how formail.pl could be exploited. For an alternative see http://nms-cgi.sourceforge.net/, which also has further discussion of the problems and solutions. See Ovid's CGI Course for web based security do's and dont's, as well as Web Programming from the tutorials section of this site.

Update: Fixed link to tutorials, thanks Corion.

[reply]