paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, (2) login.php, (3) category.php, (4) file.php, (5) team.php, (6) license.php, (7) custom.php, (8) admins.php, or (9) backupdb.php, which reveal the path in a PHP error message.
References
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:55
Type | Values Removed | Values Added |
---|---|---|
References | () http://marc.info/?l=bugtraq&m=111066293914977&w=2 - |
Information
Published : 2005-03-12 05:00
Updated : 2024-11-20 23:55
NVD link : CVE-2005-0780
Mitre link : CVE-2005-0780
CVE.ORG link : CVE-2005-0780
JSON object : View
Products Affected
php_arena
- pafiledb
CWE