Description
faqmanager.cgi in FAQManager 2.2.5 and earlier allows remote attackers to read arbitrary files by specifying the filename in the toc parameter with a trailing null character (%00).
References
- 20020107 Faqmanager.cgi file read vulnerability mailing-list
- 3810 vdb-entry
- faqmanager-cgi-null-file-read(7833) vdb-entry