CVE-2005-0724

CVE-2005-0724 describes an information disclosure vulnerability in paFileDB 3.1 and earlier, affecting php_arena pafiledb. Remote attackers can obtain sensitive path information by providing an invalid 'str' parameter to pafiledb.php or directly requesting various other PHP files, which triggers a PHP error message revealing the server's path. This vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity and requires no authentication, potentially leading to the disclosure of sensitive information (Confidentiality: Partial) but not impacting integrity or availability. There is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, suggesting low public awareness and attention for this older vulnerability.