CVE Catalog

CVE-1999-1255

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.16%

63th percentile - higher than 63% of all known CVEs

Summary

Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action parameter.

Risk Assessment

Attackers may make unauthorized changes to the configuration, potentially leading to serious security breaches.

Recommendation

It is recommended to restrict access to the admin.cgi program and implement appropriate authorization mechanisms.

Original NVD description (English source)

Hyperseek allows remote attackers to modify the hyperseek configuration by directly calling the admin.cgi program with an edit_file action parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS