paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via (1) an invalid str parameter to pafiledb.php, or a direct request to (2) viewall.php, (3) stats.php, (4) search.php, (5) rate.php, (6) main.php, (7) license.php, (8) category.php, (9) download.php, (10) file.php, (11) email.php, or (12) admin.php, which reveals the path in a PHP error message.
References
Link | Resource |
---|---|
http://marc.info/?l=bugtraq&m=111031801802851&w=2 |
Configurations
Information
Published : 2005-05-01 21:00
Updated : 2016-10-17 20:14
NVD link : CVE-2005-0724
Mitre link : CVE-2005-0724
JSON object : View
CWE
Products Affected
php_arena
- pafiledb