Matt Wright

Formhandler.Cgi

2 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
Exploit
  • EPSS 0.96%
  • Published 16.11.1999 05:00:00
  • Last modified 03.04.2025 01:03:51

Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the reply_message_attach ...

Exploit
  • EPSS 4.82%
  • Published 12.11.1999 05:00:00
  • Last modified 03.04.2025 01:03:51

Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachment parameter, or (2) by specifying the filename as a template.