/ 
CGI.pm-2.37b21
River stage four • 306 direct dependents • 1699 total dependents
/ CGI::Switch
Security Advisories (6)
CVE-2012-5526 (2012-11-21)

CGI.pm module before 3.63 for Perl does not properly escape newlines in (1) Set-Cookie or (2) P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm.

CVE-2011-2766 (2011-11-08)

Usage of deprecated FCGI.pm API.

CPANSA-CGI-2010-02 (2010-11-08)

Non-random MIME boundary.

CPANSA-CGI-2010-01 (2010-02-05)

Newlines in headers.

CVE-2010-4411 (2010-12-06)

Unspecified vulnerability in CGI.pm 3.50 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unknown vectors. NOTE: this issue exists because of an incomplete fix for CVE-2010-2761.

CVE-2010-2761 (2010-12-06)

The multipart_init function in (1) CGI.pm before 3.50 and (2) Simple.pm in CGI::Simple 1.112 and earlier uses a hardcoded value of the MIME boundary string in multipart/x-mixed-replace content, which allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted input that contains this value, a different vulnerability than CVE-2010-3172.

NAME

CGI::Switch - Try more than one constructors and return the first object available

SYNOPSIS

use CGISwitch;

 -or-

use CGI::Switch This, That, CGI::XA, Foo, Bar, CGI;

my $q = new CGI::Switch;

DESCRIPTION

Per default the new() method tries to call new() in the three packages Apache::CGI, CGI::XA, and CGI. It returns the first CGI object it succeeds with.

The import method allows you to set up the default order of the modules to be tested.

SEE ALSO

perl(1), Apache(3), CGI(3), CGI::XA(3)

AUTHOR

Andreas König <a.koenig@mind.de>

1 POD Error

The following errors were encountered while parsing the POD:

Around line 69:

Non-ASCII character seen before =encoding in 'König'. Assuming CP1252