CVE-1999-0474
published 1999-04-05CVE-1999-0474: The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory.
PriorityP422medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.90%
77.1th percentile
The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mirabilis | icq | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Mirabilis ICQ 99a 2.13build1700 Webserver path traversal (XFDB-2085 / SBV-616)
vuldb·2026-04-19·CVSS 5.0
CVE-1999-0474 [MEDIUM] Mirabilis ICQ 99a 2.13build1700 Webserver path traversal (XFDB-2085 / SBV-616)
A vulnerability was found in Mirabilis ICQ 99a 2.13build1700. It has been rated as critical. This impacts an unknown function of the component Webserver. Performing a manipulation results in path traversal.
This vulnerability is known as CVE-1999-0474. Remote exploitation of the attack is possible. Furthermore, an exploit is available. This vulnerability is considered historic because of its background and reception.
Upgrading the affected component is advised.
GHSA
GHSA-xr9p-qj4x-c6c7: The ICQ Webserver allows remote attackers to use
ghsa_unreviewed·2022-04-30
CVE-1999-0474 [MEDIUM] GHSA-xr9p-qj4x-c6c7: The ICQ Webserver allows remote attackers to use
The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
1999-04-05
Published