CVE-2000-0877

mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in the XX-attach_file parameter, which…

published September 18, 2001

CVSS
—
EPSS
2%
Percentile
74.9
In the wild
Unconfirmed
What it is

mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in the XX-attach_file parameter, which MailForm then sends to the attacker.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01562 · 74.9th percentile
Published
2001-09-18T04:00Z
EPSS history
Timeline
  • 18 SEP 04:00Z
    mailform.pl CGI script in MailForm 2.0 allows remote attackers to read arbitrary files by specifying the file name in the XX-attach_file parameter, which…
    cvelistv5