CVE-1999-0346

CVSS 2.0 Score 5 of 10 (medium)

Details

Published Oct 16, 1997
Updated: Nov 20, 2024

Summary

CVE-1999-0346 is a vulnerability affecting the CGI PHP mlog script. An attacker can exploit this weakness to read any file on the target server, posing a significant risk to sensitive data. The mlog script, which is used for logging PHP errors, does not adequately restrict file access, making it an attractive target for unauthorized data retrieval. This vulnerability underscores the importance of implementing proper access controls and regularly updating software to mitigate potential threats.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share