CVE-2004-1974: paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1) login.php, (...

Security readout for executives and security teams

This CVE describes an old paFileDB 3.1 issue where direct requests to certain PHP pages can expose the server’s filesystem path in an error message. That information alone is not a breach, but it can help an attacker understand the hosting layout and plan other attacks. Exposure is most likely limited to legacy internet-facing sites still running paFileDB 3.1 or archived copies of that application. The supplied CPE data is not populated, so product inventory must rely on local application records and web content review. Treat this as a low-priority legacy exposure unless paFileDB 3.1 is still internet-facing. The main risk is attacker reconnaissance, not immediate compromise based on the supplied evidence. Mitigation focus: Check vendor or project guidance for any available paFileDB fix or replacement.; Remove or retire paFileDB 3.1 if it is no longer required.; Disable detailed PHP errors in production responses..

Prepared

Jun 29, 2026, 21:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.