CVE-2000-1225

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2000-12-31 · updated 2026-09-23

Description

Xitami 2.5b installs the testcgi.exe program by default in the cgi-bin directory, which allows remote attackers to gain sensitive configuration information about the web server by accessing the program.

Affected products

Imatix Xitami: 2.5_b

References

http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0109.html
http://archives.neohapsis.com/archives/win2ksecadvice/2000-q4/0109.html

Get alerted when CVE-2000-1225 or the next vulnerability affects your stack