CVE-2005-4405

redqueen.cgi in Red Queen 1.02 and earlier allows remote attackers to obtain the full server path via invalid 1 yellowpageid, 2 skinid, 3 supplierid, and 4 module parameters, which leaks the path in an error message...

CVE-2005-4405

redqueen.cgi in Red Queen 1.02 and earlier allows remote attackers to obtain the full server path via invalid 1 yellowpageid, 2 skinid, 3 supplierid, and 4 module parameters, which leaks the path in an error message...

CVE-2005-4405

CVE-2005-4405 affects Red Queen 1.02 and earlier. The vulnerability arises in redqueen.cgi where remote attackers can trigger leakage of the full server path via invalid parameters (yellowpage_id, skin_id, supplier_id, module), disclosed in an error message. This is a path disclosure vulnerabilit...

RED QUEEN Path Disclosure

RED QUEEN Path Disclosure Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/red-queen-path-disclosure.html vendor:http://www.randommouse.com/cgi-bin/rms/ product/about/aboutproduct.cgi?sku=REDQN &referer=hotscripts&creative=linkindexing affected...