2004-07-13 04:00:00
mitre
PUBLISHED
csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, which reveals the path to the web server in an error message.