CVE-1999-1051

Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/…

published September 12, 2001

CVSS
—
EPSS
1%
Percentile
73.0
In the wild
Unconfirmed
What it is

Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the reply_message_attach attachment parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01440 · 73.0th percentile
Published
2001-09-12T04:00Z
EPSS history
Timeline
  • 12 SEP 04:00Z
    Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/…
    cvelistv5