CVE Catalog
CVE-1999-0068
HighExploitation Probability (EPSS)
Very high risk7.03%
93th percentile - higher than 93% of all known CVEs
Summary
The mylog script in CGI PHP allows an attacker to read any file on the target server.
Risk Assessment
The ability to read files may lead to the exposure of sensitive data, posing a serious security threat to the organization.
Recommendation
It is recommended to update the script or implement appropriate security measures to restrict file access on the server.
Original NVD description (English source)
CGI PHP mylog script allows an attacker to read any file on the target server.