CVE-1999-1050

Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via 1 a .. dot dot in the replymessageattach attachment parameter, or 2 by specifying the filename as a template...