Vulnerabilities > Curl > Curl > 7.21.1

DATE CVE VULNERABILITY TITLE RISK
2012-04-13 CVE-2012-0036 SQL Injection vulnerability in Curl and Libcurl
curl and libcurl 7.2x before 7.24.0 do not properly consider special characters during extraction of a pathname from a URL, which allows remote attackers to conduct data-injection attacks via a crafted URL, as demonstrated by a CRLF injection attack on the (1) IMAP, (2) POP3, or (3) SMTP protocol.
network
low complexity
curl CWE-89
7.5
7.5
2010-10-28 CVE-2010-3842 Path Traversal vulnerability in Curl 7.20.0/7.20.1/7.21.1
Absolute path traversal vulnerability in curl 7.20.0 through 7.21.1, when the --remote-header-name or -J option is used, allows remote servers to create or overwrite arbitrary files by using \ (backslash) as a separator of path components within the Content-disposition HTTP header.
network
curl CWE-22
5.8
5.8