CVE-2000-0912

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2000-12-19 · updated 2026-09-23

Description

MultiHTML CGI script allows remote attackers to read arbitrary files and possibly execute arbitrary commands by specifying the file name to the "multi" parameter.

Affected products

Jcs Web Works Multihtml: all versions

References

http://archives.neohapsis.com/archives/bugtraq/2000-09/0146.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/5285
http://archives.neohapsis.com/archives/bugtraq/2000-09/0146.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/5285

Get alerted when CVE-2000-0912 or the next vulnerability affects your stack