vulnwire
5.0med

CVE-2004-06651 exploit

csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, which reveals the path to the w…

Published 22 y ago · modified 4 mo ago · JSON

CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.9%
percentile 87%
Public exploits
1
Exploit-DB

csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, which reveals the path to the web server in an error message.

Exploit prediction (EPSS)

2.94% probability of exploitation in the next 30 days, higher than 87% of all scored CVEs.

Exploits and detections

  • EDB-24237 CGIScript.net CSFAQ 1.0 Script - Full Path Disclosure · webapps · 2004-06-28

CVSS scores

Assigned byVersionScoreVector
NVD2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

References

  • swp-zone.org /archivos/advisory-08.txt · x_refsource_MISC, x_transferred
  • marc.info /?l=bugtraq&m=108844203121238&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/10618 · vdb-entry, x_refsource_BID, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/16526 · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.