← Back

Formhandler.cgi

formhandler.cgi

Vendor: Matt Wright • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-1999-1051
1Matt Wright
1Formhandler.cgi
Apr 16, 2026
Nov 16, 1999
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files...Show more
Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the reply_message_attach attachment parameter.Show less
CVE-1999-1050
1Matt Wright
1Formhandler.cgi
Apr 16, 2026
Nov 12, 1999
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachment parameter, or (2) by specifying the fi...Show more
Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachment parameter, or (2) by specifying the filename as a template.Show less