CVE-1999-0174

The view-source CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack.

CVSS v3.1

—

EPSS

6.90%

probability of exploitation in 30 days

CISA KEV

Not listed

no confirmed exploitation reported

News coverage

sources referencing this CVE

Connections

1 relationships

Timeline

disclosure → media coverage

Feb 1, 1997

Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026