cbcvebase.
CVE-1999-1051
published 1999-11-16

CVE-1999-1051: Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/…

PriorityP418medium5CVSS 2.0
AVNACLAuNCPINAN
EPSS
1.44%
69.9th percentile
Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the reply_message_attach attachment parameter.

Affected

3 ranges
VendorProductVersion rangeFixed in
matt_wrightformhandler.cgi——
matt_wrightformhandler.cgi——
matt_wrightformhandler.cgi——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.