CVE-2004-0665 csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, which reveals the path to the web server in an error message.
MediumCVSS 5.0
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, which reveals the path to the web server in an error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cgiscript.net csfaq | All versions | No fix listed |
| cgiscript.net csfaq | = 1.0 | No fix listed |
References
- 20040628 Full path disclosure csFAQ mailing-list
- 10618 exploit vdb-entry vendor-advisory
- www.swp-zone.org
- csfaq-path-disclosure(16526) vdb-entry