CVE-2000-1196

PSCOErrPage.htm in Netscape PublishingXpert 2.5 before SP2 allows remote attackers to read arbitrary files by specifying the target file in the errPagePath parameter...

CVE-2000-1196

Netscape PublishingXpert 2.5 before SP2 is affected by CVE-2000-1196 via PSCOErrPage.htm. The PSUser/PSCOErrPage.htm CGI mishandles the errPagePath parameter, allowing an attacker to read arbitrary files on the target system (information disclosure). CVSS info from NVD indicates network-vector, l...