CVE-2004-0665: Cgiscript.net Csfaq

Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days.

csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, which reveals the path to the web server in an error message.

Affected products

Published 2004-08-06. Last modified 2026-06-16.