CVE-1999-1052
MediumExploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
Microsoft FrontPage stores form results in a default location at /_private/form_results.txt, which is world-readable and accessible in the document root. This allows remote attackers to read possibly sensitive information submitted by other users.
Risk Assessment
The risk is that unauthorized users may gain access to confidential data, potentially leading to breaches of privacy and information security within the organization.
Recommendation
It is recommended to change the storage location of form results to a more secure one and to restrict access to files in the document root.
Original NVD description (English source)
Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and accessible in the document root, which allows remote attackers to read possibly sensitive information submitted by other users.