Exploitation Summary
EIP tracks 2 public exploits for CVE-1999-0467. PoCs published by Mnemonix.
AI-analyzed exploit summary The writeup describes a directory traversal vulnerability in the freeware guestbook package, allowing arbitrary file read via the 'template' parameter in rguest.exe or wguest.exe. The example demonstrates retrieving boot.ini by manipulating the path.
Description
The Webcom CGI Guestbook programs wguest.exe and rguest.exe allow a remote attacker to read arbitrary files using the "template" parameter.
Exploits (2)
The writeup describes a directory traversal vulnerability in the freeware guestbook package, allowing arbitrary file read via the 'template' parameter in rguest.exe or wguest.exe. The example demonstrates retrieving boot.ini by manipulating the path.
This is a writeup describing a directory traversal vulnerability in the freeware guestbook package. The vulnerability allows an attacker to read arbitrary files by manipulating the 'template' parameter in rguest.exe or wguest.exe.