2002-07-26 04:00:00
mitre
PUBLISHED
CGIscript.net csMailto.cgi program allows remote attackers to read arbitrary files by specifying the target filename in the form-attachment field.