CVE-2005-0326: PHP Arena Pafiledb

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

pafiledb.php in PaFileDB 3.1 allows remote attackers to gain sensitive information via an invalid or missing action parameter, which reveals the path in an error message when it cannot include a login.php script.

Affected products

• PHP Arena Pafiledb: version 3.1 only

Published 2005-05-02. Last modified 2026-06-16.