WebCom datakommunikation Guestbook 0.1 - 'wguest.exe' Arbitrary File Access
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | CVE-1999-0287 | 4 Feb 200005:00 | – | cve |
| CVE-1999-0467 | 4 Feb 200005:00 | – | cve |
 | CVE-1999-0287 | 4 Feb 200005:00 | – | cvelist |
| CVE-1999-0467 | 4 Feb 200005:00 | – | cvelist |
 | WebCom datakommunikation Guestbook 0.1 - 'rguest.exe' Arbitrary File Access | 9 Apr 199900:00 | – | exploitdb |
 | EUVD-1999-0287 | 7 Oct 202500:30 | – | euvd |
| EUVD-1999-0466 | 7 Oct 202500:30 | – | euvd |
 | CVE-1999-0287 | 9 Apr 199904:00 | – | nvd |
| CVE-1999-0467 | 1 Apr 199905:00 | – | nvd |
 | PT-1999-1032 · Wguest · Wguest | 9 Apr 199900:00 | – | ptsecurity |
10
source: https://www.securityfocus.com/bid/2024/info
The freeware guestbook package from freeware.webcom.se provides a web-based guestbook feature, using CGI. Some versions of this guestbook (undetermined at the time of writing) are vulnerable to an attack allowing an intruder to retrieve the contents of arbitrary files to which the web server has access. This can be accomplished by specifying the path and filename as the parameter "template" to either rguest.exe or wguest.exe - see Exploit for example. These two programs typically reside in /cgi-bin.
A request for http://server/cgi-bin/wguest.exe?template=c:\boot.ini will return the remote Web server's boot.iniData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
12 Aug 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 27.5
EPSS0.07533