CVE-2005-4405 redqueen.cgi in Red Queen 1.02 and earlier allows remote attackers to obtain the full server path via invalid (1) yellowpage_id, (2) skin_id, (3) supplier_id, and (4) module parameters, which leaks th...
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
redqueen.cgi in Red Queen 1.02 and earlier allows remote attackers to obtain the full server path via invalid (1) yellowpage_id, (2) skin_id, (3) supplier_id, and (4) module parameters, which leaks the path in an error message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| random mouse software red queen | <= 1.02 | No fix listed |
References
- pridels0.blogspot.com
- 18072 third-party-advisory vendor-advisory
- ADV-2005-2969 vdb-entry