CVE-2004-1974

CVE-2004-1974 describes an information disclosure vulnerability in php_arena paFileDB version 3.1. Remote attackers can exploit this by directly requesting various PHP scripts, such as login.php or main.php, which then reveal the full path in an error message. This vulnerability has a CVSS score of 5.0, indicating a medium severity, with low attack complexity and no authentication required, leading to a potential impact of partial confidentiality loss. There is no evidence of active exploitation, nor is exploit code publicly available in Metasploit or ExploitDB, and it has received negligible community or media attention.