{
    "id": "CVE-2004-1551",
    "published": "2004-12-31 05:00:00",
    "last_modified": "2026-06-16 22:07:55",
    "cvss_score": "4.3",
    "cvss_severity": "MEDIUM",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
    "cwe": null,
    "description": "Cross-site scripting (XSS) vulnerability in the (1) email or (2) file modules in paFileDB 3.1 Final allows remote attackers to execute arbitrary web script or HTML via the id parameter.",
    "epss_score": "0.02632",
    "epss_percentile": "0.85050",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-10-06 18:17:03",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "php_arena",
            "product": "pafiledb"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "10667",
            "title": "paFileDB 3.1 - Cross-Site Scripting",
            "date": "2009-12-26",
            "url": "https://www.exploit-db.com/exploits/10667"
        }
    ],
    "refs_list": [
        "http://marc.info/?l=bugtraq&m=109613031414184&w=2",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/17504",
        "http://marc.info/?l=bugtraq&m=109613031414184&w=2",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/17504"
    ]
}