CVE-1999-1050
MediumExploitation Probability (EPSS)
Very high risk94th percentile - higher than 94% of all known CVEs
Summary
Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachment parameter, or (2) by specifying the filename as a template.
Risk Assessment
An attacker could gain access to sensitive data within the system, potentially leading to serious security breaches.
Recommendation
It is recommended to update the FormHandler.cgi script to the latest version and implement appropriate security measures to block directory traversal.
Original NVD description (English source)
Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachment parameter, or (2) by specifying the filename as a template.