CVE-2000-0726

CGIMail.exe CGI program in Stalkerlab Mailers 1.1.2 allows remote attackers to read arbitrary files by specifying the file in the $Attach$ hidden form variable.

Score

CVSS 2.0 2.6 Low

Status

Modified - cve@mitre.org

Published

2000-10-20

Last modified

2024-08-08

Affected products

• Mailers (Stalkerlab)

References

• http://www.securityfocus.com/bid/1623
• http://www.securityfocus.com/templates/archive.pike?list=1&msg=20000829194618.H7744%40thathost.com
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5165