Description
The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Geoff Hutchison · textremoteunix
https://www.exploit-db.com/exploits/19785
References (1)
Core 1
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/1026
Scores
EPSS
0.0668
EPSS Percentile
91.3%
Details
Status
published
Products (5)
htdig/htdig
3.1.1
htdig/htdig
3.1.2
htdig/htdig
3.1.3
htdig/htdig
3.1.4
htdig/htdig
3.2.0b1
Published
Feb 29, 2000
Tracked Since
Feb 18, 2026