CVE-2000-1196

Netscape PublishingXpert 2.5 before SP2 is affected by CVE-2000-1196 via PSCOErrPage.htm. The PSUser/PSCOErrPage.htm CGI mishandles the errPagePath parameter, allowing an attacker to read arbitrary files on the target system (information disclosure). CVSS info from NVD indicates network-vector, l...