{"id":"CVE-2004-1974","aliases":["EUVD-2004-1966","GHSA-3xx8-2m7h-8rhw"],"status":"published","title":"paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1)...","description":"paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1) login.php, (2) category.php, (3) search.php, (4) main.php, (5) viewall.php, (6) download.php, (7) email.php, (8) file.php, (9) rate.php, or (10) stats.php, which reveals the path in an error message.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01181,"percentile":0.67931,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2004-04-27T04:00:00Z","modified":"2026-06-16T22:08:45Z","products":[{"vendor":"php_arena","product":"pafiledb"}],"references":[{"url":"http://marc.info/?l=bugtraq\u0026m=108311096022485\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/15990","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1974"},{"url":"https://github.com/advisories/GHSA-3xx8-2m7h-8rhw"}],"sources":{"cve":[{"id":"CVE-2004-1974","description":"paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1) login.php, (2) category.php, (3) search.php, (4) main.php, (5) viewall.php, (6) download.php, (7) email.php, (8) file.php, (9) rate.php, or (10) stats.php, which reveals the path in an error message.","status":"published","published":"2005-05-10T04:00:00Z","modified":"2024-08-08T01:07:49.167Z","updated_at":"2026-11-02T14:34:54.398187Z"}],"euvd":[{"id":"EUVD-2004-1966","description":"paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1) login.php, (2) category.php, (3) search.php, (4) main.php, (5) viewall.php, (6) download.php, (7) email.php, (8) file.php, (9) rate.php, or (10) stats.php, which reveals the path in an error message.","status":"published","published":"2005-05-10T04:00:00Z","modified":"2024-08-08T01:07:49Z","updated_at":"2026-11-03T01:15:12.315673Z"}],"ghsa":[{"id":"GHSA-3xx8-2m7h-8rhw","title":"paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1)...","description":"paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1) login.php, (2) category.php, (3) search.php, (4) main.php, (5) viewall.php, (6) download.php, (7) email.php, (8) file.php, (9) rate.php, or (10) stats.php, which reveals the path in an error message.","status":"published","published":"2022-04-29T03:00:33Z","modified":"2023-01-30T05:03:38Z","updated_at":"2026-11-02T14:46:52.830536Z"}],"nvd":[{"id":"CVE-2004-1974","description":"paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1) login.php, (2) category.php, (3) search.php, (4) main.php, (5) viewall.php, (6) download.php, (7) email.php, (8) file.php, (9) rate.php, or (10) stats.php, which reveals the path in an error message.","status":"published","published":"2004-04-27T04:00:00Z","modified":"2026-06-16T22:08:45.263Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:49.729639Z"}]}}