Description
CGIMail.exe CGI program in Stalkerlab Mailers 1.1.2 allows remote attackers to read arbitrary files by specifying the file in the $Attach$ hidden form variable.
References
- mailers-cgimail-spoof(5165) vdb-entry
- 1623 vdb-entry
- 20000829 Stalker's CGImail Gives Read Access to All Server Files mailing-list