EDB-19785

functional

The ht://Dig Group ht://Dig 3.1.1/3.1.2/3.1.3/3.1.4/3.2 .0b1 - Arbitrary File Inclusion

view exploit source exploit_dbverifiedtype remoteauthor Geoff Hutchisonpublished 2000-02-29catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2000-0208US	medium5.0	6.86% (94th)	Exploit	2000-02-29
The htdig (ht://Dig) CGI program htsearch allows remote attackers to read arbitrary files by enclosing the file name with backticks (`) in parameters to htsearch.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.