CVE-2000-0208

The htdig () CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.

Date published : 2000-04-10

http://www.securityfocus.com/bid/1026