CVE Catalog

CVE-1999-0467

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
7.74%

94th percentile - higher than 94% of all known CVEs

Summary

The Webcom CGI Guestbook programs, wguest.exe and rguest.exe, allow a remote attacker to read arbitrary files using the 'template' parameter.

Risk Assessment

An attacker could gain access to sensitive information stored on the server, potentially leading to serious security breaches.

Recommendation

It is recommended to update the software to the latest version and restrict access to CGI parameters to minimize risk.

Original NVD description (English source)

The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS