CVE Catalog
CVE-1999-1255
MediumExploitation Probability (EPSS)
Elevated risk1.16%
63th percentile - higher than 63% of all known CVEs
Summary
Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action parameter.
Risk Assessment
Attackers may make unauthorized changes to the configuration, potentially leading to serious security breaches.
Recommendation
It is recommended to restrict access to the admin.cgi program and implement appropriate authorization mechanisms.
Original NVD description (English source)
Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action parameter.

