Vulnerability in Faqmanager Faqmanager.cgi

CVE-2002-2033

faqmanager.cgi in FAQManager 2.2.5 and earlier allows remote attackers to read arbitrary files by specifying the filename in the toc parameter with a trailing null character (%00).

EPSS: 0.014 (69.2th percentile) — read the EPSS interpretation.

Affected products

Faqmanager Faqmanager.cgi — versions 2.0, 2.1, 2.1.1
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Patch)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (Patch, vdb-entry, x_refsource_XF)