CVE-2000-0912

MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifying the file name to the "multi" parameter.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2000-12-19

Last modified

2024-08-08

Affected products

• Multihtml (Jcs Web Works)

References

• http://archives.neohapsis.com/archives/bugtraq/2000-09/0146.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/5285