CVE-2004-1431

CVE-2004-1431 describes a vulnerability in FormMail.php 5.0, and potentially other versions, that allows remote attackers to read arbitrary files. This is achieved by providing a full file path in the 'ar_file' (auto-reply) parameter. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with low attack complexity and potential for information disclosure. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion, with 10 mentions across various platforms.