What’s Vulnerable › Vulnerabilities

CVE-2004-1219

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-01-10 · updated 2026-06-16

Description

paFileDB 3.1, when using sessions authentication and while the administrator logs on, allows remote attackers to read the administrator's password hash and conduct brute force password guessing attacks by listing the contents of the sessions directory and reading the associated file for the administrator session.

Affected products

• Php Arena Pafiledb: 3.1

References

• http://echo.or.id/adv/adv09-y3dips-2004.txt
• http://marc.info/?l=bugtraq&m=110245123927025&w=2
• http://www.securityfocus.com/bid/11818
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18364
• http://echo.or.id/adv/adv09-y3dips-2004.txt
• http://marc.info/?l=bugtraq&m=110245123927025&w=2
• http://www.securityfocus.com/bid/11818
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18364

Get alerted when CVE-2004-1219 or the next vulnerability affects your stack