VendorsMatt Wrightformhandler.cgiall versions
Vulnerabilities

Matt Wright Formhandler.cgi

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-1999-1050
Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachment parameter, or (2) by specifying the filename as a template.
Published 2001-09-12 · Modified
5.01 PoCEPSS 0.079
CVE-1999-1051
Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the reply_message_attach attachment parameter.
Published 2001-09-12 · Modified
5.0EPSS 0.014