CVE-1999-1051: Undefined Security Weakness

Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the replymessageattach attachment parameter...

CVE-1999-1050: Undefined Security Weakness

Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via 1 a .. dot dot in the replymessageattach attachment parameter, or 2 by specifying the filename as a template...