CVE Catalog

CVE-2000-0288

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
2.40%

82th percentile - higher than 82% of all known CVEs

Summary

The vulnerability in Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable.

Risk Assessment

Organizations may lose revenue from payments and expose themselves to unauthorized access to confidential documents.

Recommendation

It is recommended to update the software and implement additional payment verification mechanisms.

Original NVD description (English source)

Infonautics getdoc.cgi allows remote attackers to bypass the payment phase for accessing documents via a modified form variable.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS