CVE-2002-0879: Gafware Cfximage

Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days.

showtemp.cfm for Gafware CFXImage 1.6.6 allows remote attackers to read arbitrary files via (1) a .. or (2) a C: style pathname in the FILE parameter.

Affected products

• Gafware Cfximage: version 1.6.4 only; version 1.6.6 only

Published 2002-10-04. Last modified 2026-06-16.