or load-bearing CGI and perl... (perl's OK, CGI had a lot more server side injec... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

paulmd on Feb 8, 2020 | parent | context | favorite | on: Lycos is still around and its search is pretty goo...

or load-bearing CGI and perl...

(perl's OK, CGI had a lot more server side injection risk from what I remember)

post_below on Feb 8, 2020 [–]

CGI as in "Common Gateway Interface" or CGI.pm?

If the former, the injection vulnerability would be in the script talking to the server/database via CGI, rather than in CGI itself.

If the latter I don't remember any major unpatched vulnerabilities in CGI.pm, but it was epically inefficient.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact