CVE-2004-0665

csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, which reveals the path to the web server in an error message.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

2.94% chance of exploitation in the next 30 days, 86th percentile

Published

2004-07-13

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/24237

References

• CVE Record
• NVD entry

Related

• CVE-2004-0664
• CVE-2004-0668
• CVE-2004-0660
• CVE-2004-0671
• CVE-2004-0659
• CVE-2004-0672