CVE-1999-1052

Microsoft FrontPage stores form results in a default location in /_private/form_results.txt, which is world-readable and accessible in the document root, which allows remote attackers to read possibly sensitive information submitted by other users.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

1999-08-24

Last modified

2024-08-01

Affected products

• Frontpage (Microsoft)

References

• http://marc.info/?l=bugtraq&m=93582550911564&w=2