CVE-2004-0665

medium

Description

csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, which reveals the path to the web server in an error message.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/16526

https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-0664

http://www.swp-zone.org/archivos/advisory-08.txt

http://www.securityfocus.com/bid/10618

http://marc.info/?l=bugtraq&m=108844203121238&w=2

Details

Source: Mitre, NVD

Published: 2004-08-06

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N