Description
Htgrep CGI program allows remote attackers to read arbitrary files by specifying the full pathname in the hdr parameter.
References
- htgrep-cgi-view-files(5476) vdb-entry
- 20000817 Htgrep CGI Arbitrary File Viewing Vulnerability mailing-list