CVE-2005-2001: PHP Arena Pafiledb

Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in pafiledb.php in paFileDB 3.1 and earlier allows remote attackers to include arbitrary files via a .. (dot dot) in the action parameter.

Affected products

• PHP Arena Pafiledb: version 1.1.3 only; version 2.1.1 only; version 3.0 only; version 3.0_beta_3.1 only; version 3.1 only

Published 2005-06-15. Last modified 2026-06-16.