CVE-2005-0780

published 2005-03-12

CVE-2005-0780: paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, (2) login.php, (3) category.php, (4)…

Priority P4 16 medium 5 CVSS 2.0

AV N AC L Au N C P I N A N

EXPLOIT

paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, (2) login.php, (3) category.php, (4) file.php, (5) team.php, (6) license.php, (7) custom.php, (8) admins.php, or (9) backupdb.php, which reveal the path in a PHP error message.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
php_arena	pafiledb	—	—
php_arena	pafiledb	—	—
php_arena	pafiledb	—	—
php_arena	pafiledb	—	—
php_arena	pafiledb	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.