Htgrep CGI program allows remote attackers to read arbitrary files by specifying the full pathname in the hdr parameter.Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/5476http://archives.neohapsis.com/archives/bugtraq/2000-08/0208.html