medium5.0
CVE-1999-1051
Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ dir…
Impact
Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the reply_message_attach attachment parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Matt Wright | Formhandler.Cgi | Versions 1.0, 2.0, 3.0 |