PT-2005-1404 · Pafiledb · Pafiledb

Devil_Box · Published 2005-02-10 · Updated 2017-07-11 · CVE-2005-0326

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions PaFileDB version 3.1

Description The issue allows remote attackers to gain sensitive information. This occurs when an invalid or missing action parameter is provided, resulting in an error message that reveals the path when it cannot include a login.php script.

Recommendations For PaFileDB version 3.1, consider restricting access to the pafiledb.php script until a patch is available, or ensure that the action parameter is properly validated to prevent information disclosure.

Fix

Related Identifiers

CVE-2005-0326

Affected Products

Pafiledb

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-0326 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19175 · Note
• http://marc.info/?l=bugtraq&m=110720365923818&w=2 · Note