CVE-1999-1050 | BDVDB-2026-2602 Detail

Description#

Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachment parameter, or (2) by specifying the filename as a template.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/3550
http://www.securityfocus.com/bid/798
http://www.securityfocus.com/bid/799
http://www.securityfocus.com/archive/1/34600
http://www.securityfocus.com/archive/1/34939

Exploit#

No public exploit known

History#

Version 12001-09-12Record published in the CVE List.
Version 22024-08-01Most recent update recorded in the CVE List.