Description (CNA)
csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, which reveals the path to the web server in an error message.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.swp-zone.org/archivos/advisory-08.txt
- http://marc.info/?l=bugtraq&m=108844203121238&w=2
- http://www.securityfocus.com/bid/10618
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16526
ADP enrichment
No English description supplied.