CVE-2004-1219

CVE-2004-1219 describes a vulnerability in paFileDB 3.1 that allows remote attackers to read the administrator's password hash. This occurs when the administrator is logged on and sessions authentication is in use, enabling attackers to list the contents of the sessions directory and access the administrator's session file. With a CVSS score of 5.0, this vulnerability has a low attack complexity and requires no authentication, potentially leading to information disclosure (password hash). There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB, though it has garnered significant community discussion with 10 mentions.