CVE-1999-1051

Summary

CVE-1999-1051 involves the Matt Wright FormHandler.cgi script, which by default allows arbitrary directories for attachment uploads, restricting access only to the /etc/ directory. This weakness enables remote attackers to read sensitive files by manipulating the "reply_message_attach" parameter in the attachment parameter.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.