Vulnonym.org

CVE-1999-1052 - Follow up Retrievals

Description

Microsoft FrontPage stores form results in a default location in /_private/form_results.txt which is world-readable and accessible in the document root which allows remote attackers to read possibly sensitive information submitted by other users.

Reference

http://marc.info/?l=bugtraq&m=93582550911564&w=2