Every CVESearch/Get API key

CVE-2005-2013

paFAQ 1.0 Beta 4 allows remote attackers to obtain sensitive information via a direct request to...

5.0 Medium

paFAQ 1.0 Beta 4 allows remote attackers to obtain sensitive information via a direct request to admin/backup.php, which contains a backup of the database including usernames and passwords.

Exploit likelihood

1.34%Up 0.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used5.0

paFAQ 1.0 Beta 4 allows remote attackers to obtain sensitive information via a direct request to admin/backup.php, which contains a backup of the database including usernames and passwords.

Record
CVE-2005-2013
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE ListNo score

paFAQ 1.0 Beta 4 allows remote attackers to obtain sensitive information via a direct request to admin/backup.php, which contains a backup of the database including usernames and passwords.

Record
CVE-2005-2013
Updated
2026-11-02
EUVDEUVD-2005-2015No score

paFAQ 1.0 Beta 4 allows remote attackers to obtain sensitive information via a direct request to admin/backup.php, which contains a backup of the database including usernames and passwords.

Record
EUVD-2005-2015
Updated
2026-11-03
GitHub AdvisoriesGHSA-q768-g46g-x66pNo score

paFAQ 1.0 Beta 4 allows remote attackers to obtain sensitive information via a direct request to...

paFAQ 1.0 Beta 4 allows remote attackers to obtain sensitive information via a direct request to admin/backup.php, which contains a backup of the database including usernames and passwords.

Record
GHSA-q768-g46g-x66p
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-2013 is a medium vulnerability (CVSS 5.0) in Php Arena Pafaq, published June 20, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.34%, the 71st percentile. No source names a fixed version.

References

MoveEnter Open