CVE-2004-1205

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

codebrowserpntm.php in PnTresMailer 6.03 allows remote attackers to gain sensitive information via an invalid filetohighlight parameter, which reveals the full path in an error message.

Published 2005-01-10. Last modified 2026-06-16.