CVE Catalog
CVE-1999-0196
MediumExploitation Probability (EPSS)
Very high risk13.07%
96th percentile - higher than 96% of all known CVEs
Summary
Websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver).
Risk Assessment
This vulnerability may lead to unauthorized access to the system and execution of malicious code, posing a serious threat to the organization's security.
Recommendation
It is recommended to update Webgais to the latest version and implement appropriate security measures to restrict access to input parameters.
Original NVD description (English source)
websendmail in Webgais 1.0 allows a remote user to access arbitrary files and execute arbitrary code via the receiver parameter ($VAR_receiver variable).