CVE-2004-1974: PHP Arena Pafiledb

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1) login.php, (2) category.php, (3) search.php, (4) main.php, (5) viewall.php, (6) download.php, (7) email.php, (8) file.php, (9) rate.php, or (10) stats.php, which reveals the path in an error message.

Affected products

• PHP Arena Pafiledb: version 3.1 only

Published 2004-04-27. Last modified 2026-06-16.