One of the early web application vulnerabilities I remember was CVE-2000-0411 [CVE]. This was a simple vulnerability in a CGI-bin script used to send e-mail.

Excerpt from SANS Internet Storm

GETSECURE.ai hasn't published its own summary of this story yet. The complete report is at SANS Internet Storm:

Read the full story at SANS Internet Storm →