CVE-2011-2201

CVE-2011-2201 affects the Data::FormValidator module (Perl) up to version 4.66. When untaint_all_constraints is enabled, it does not properly preserve the taint attribute of data, potentially allowing remote attackers to bypass taint protection via form input. The public documents confirm the vul...

CVE-2011-2201

The Data::FormValidator module 4.66 and earlier for Perl, when untaintallconstraints is enabled, does not properly preserve the taint attribute of data, which might allow remote attackers to bypass the taint protection mechanism via form input...