CVE-2005-0326

pafiledb.php in PaFileDB 3.1 allows remote attackers to gain sensitive information via an invalid or missing action parameter, which reveals the path in an error message when it cannot include a login.php script.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-05-02

Last modified

2024-08-07

Affected products

• Pafiledb (Php Arena)

References

• http://marc.info/?l=bugtraq&m=110720365923818&w=2
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19175