CVE Catalog
CVE-1999-0854
MediumExploitation Probability (EPSS)
Elevated risk1.32%
67th percentile - higher than 67% of all known CVEs
Summary
Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the HTTP server attempts to execute the file.
Risk Assessment
Attackers may gain access to sensitive data, potentially leading to user privacy breaches and financial losses for the organization.
Recommendation
It is recommended to move data files outside of the cgi-bin directory and configure the HTTP server to prevent access to these files in case of errors.
Original NVD description (English source)
Ultimate Bulletin Board stores data files in the cgi-bin directory, allowing remote attackers to view the data if an error occurs when the HTTP server attempts to execute the file.