paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via (1) an invalid str parameter to pafiledb.php, or a direct request to (2) viewall.php, (3) stats.php, (4) search.php, (5) rate.php, (6) main.php, (7) license.php, (8) category.php, (9) download.php, (10) file.php, (11) email.php, or (12) admin.php, which reveals the path in a PHP error message.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
http://marc.info/?l=bugtraq&m=111031801802851&w=2 |
![]() ![]() |
History
No history.

Status: PUBLISHED
Assigner: mitre
Published: 2005-03-12T05:00:00
Updated: 2024-08-07T21:21:06.608Z
Reserved: 2005-03-12T00:00:00
Link: CVE-2005-0724

No data.

Status : Modified
Published: 2005-05-02T04:00:00.000
Modified: 2024-11-20T23:55:46.523
Link: CVE-2005-0724

No data.