CVE-2005-0724

paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via (1) an invalid str parameter to pafiledb.php, or a direct request to (2) viewall.php, (3) stats.php, (4) search.php, (5) rate.php, (6) main.php, (7) license.php, (8) category.php, (9) download.php, (10) file.php, (11) email.php, or (12) admin.php, which reveals the path in a PHP error message.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:php_arena:pafiledb:*:*:*:*:*:*:*:*

Information

Published : 2005-05-01 21:00

Updated : 2016-10-17 20:14


NVD link : CVE-2005-0724

Mitre link : CVE-2005-0724


JSON object : View

Advertisement

dedicated server usa

Products Affected

php_arena

  • pafiledb