CVE Catalog

CVE-1999-1590

Low
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.98%

58th percentile — higher than 58% of all known CVEs

Summary

Directory traversal vulnerability in wwwcount (Count.cgi) 2.3 allows remote attackers to read arbitrary GIF files via '..' sequences in the image parameter.

Risk Assessment

Attackers may gain access to sensitive files, potentially leading to information disclosure and security breaches.

Recommendation

It is recommended to update to the latest version of the software to eliminate this vulnerability and implement appropriate safeguards against directory traversal attacks.

Original NVD description (English source)

Directory traversal vulnerability in Muhammad A. Muquit wwwcount (Count.cgi) 2.3 allows remote attackers to read arbitrary GIF files via ".." sequences in the image parameter, a different vulnerability than CVE-1999-0021.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS