CVE-1999-0467

CVE-1999-0467 describes a directory traversal vulnerability in Webcom CGI Guestbook programs, specifically wguest.exe and rguest.exe. An unauthenticated remote attacker can exploit this flaw by manipulating the "template" parameter to read arbitrary files on the server. Rated as Medium severity (CVSS 5.0), this vulnerability allows for information disclosure without requiring authentication or complex attack methods. While not listed in CISA KEV and showing no active community discussion or media coverage, exploit code for both wguest.exe and rguest.exe is publicly available on ExploitDB.