medium5.0Public exploit code
CVE-1999-0467
The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WebCom datakommunikation Guestbook 0.1 - 'rguest.exe' Arbitrary File Access1999-04-09 · remote · cgi · Verified
- WebCom datakommunikation Guestbook 0.1 - 'wguest.exe' Arbitrary File Access1999-04-09 · remote · cgi · Verified
Impact
The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Webcom | Cgi Guestbook | All versions |