high7.5
CVE-2018-14429
man-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a cgi-bin/man-cgi?/etc/passwd URI.
Impact
man-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a cgi-bin/man-cgi?/etc/passwd URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Man-Cgi Project | Man-Cgi | before 1.16 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/148855/man-cgi-Local-File-Inclusion.html
- https://www.securityfocus.com/archive/1/542208/100/0/threaded
- http://packetstormsecurity.com/files/148855/man-cgi-Local-File-Inclusion.html
- https://www.securityfocus.com/archive/1/542208/100/0/threaded