paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, (2) login.php, (3) category.php, (4) file.php, (5) team.php, (6) license.php, (7) custom.php, (8) admins.php, or (9) backupdb.php, which reveal the path in a PHP error message.
References
Link | Resource |
---|---|
http://marc.info/?l=bugtraq&m=111066293914977&w=2 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2005-03-11 21:00
Updated : 2016-10-17 20:14
NVD link : CVE-2005-0780
Mitre link : CVE-2005-0780
JSON object : View
CWE
Products Affected
php_arena
- pafiledb