Description
The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument.
References
- 20050424 remote command execution in citat.pl script mailing-list
Unscored
CVE-2005-1303
EUVD-2005-1306GHSA-5m63-q2vp-2569
The citat.pl script allows remote attackers to read arbitrary files via a full pathname in the argument.
Published Apr 26, 2005 · Updated Aug 7, 2024 · Assigned by mitre