CVE-2002-2033

Published: Dec 31, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

faqmanager.cgi in FAQManager 2.2.5 and earlier allows remote attackers to read arbitrary files by specifying the filename in the toc parameter with a trailing null character (%00).

Affected (10)

Products: Faqmanager: Faqmanager.cgi

Faqmanager

1 product

Faqmanager.cgi

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Faqmanager Faqmanager.cgi	Version 2.0
Faqmanager Faqmanager.cgi	Version 2.1.1
Faqmanager Faqmanager.cgi	Version 2.1.2
Faqmanager Faqmanager.cgi	Version 2.1
Faqmanager Faqmanager.cgi	Version 2.2.1
Faqmanager Faqmanager.cgi	Version 2.2.2
Faqmanager Faqmanager.cgi	Version 2.2.3
Faqmanager Faqmanager.cgi	Version 2.2.4
Faqmanager Faqmanager.cgi	Version 2.2.5
Faqmanager Faqmanager.cgi	Version 2.2