← Database

CVE-2000-0977

MEDIUM CVSS: 5.0 Published: 2000-12-19 Modified: 2026-06-16

Description

mailfile.cgi CGI program in MailFile 1.10 allows remote attackers to read arbitrary files by specifying the target file name in the "filename" parameter in a POST request, which is then sent by email to the address specified in the "email" parameter.

Affected Platforms

Oatmeal Studios Mail File

Weakness Type

NVD-CWE-Other

References