Description

CGI PHP mylog script allows an attacker to read any file on the target server.

Remediation

References

CVE-1999-0068

Related Vulnerabilities

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-2155)

WordPress Plugin kk Star Ratings 'root' Parameter Remote File Include (1.7)

WordPress Plugin Structured Content (JSON-LD) #wpsc Cross-Site Scripting (1.5)

WordPress Plugin Pay Per Media Player Multiple Cross-Site Scripting Vulnerabilities (1.24)

PHP Out-of-bounds Read Vulnerability (CVE-2017-9227)

Severity

High

Classification

CVE-1999-0068

Tags

Missing Update Known Vulnerabilities