Lucene search

[email protected]CVE-2005-0781

HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0781

2005-05-0204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-0781

sql injection

pafiledb

viewall.php

category.php

nvd

8.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

60.5%

JSON

SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter to pafiledb.php.

CPENameOperatorVersion
php_arena:pafiledbphp arena pafiledbeq3.0
php_arena:pafiledbphp arena pafiledbeq2.1.1
php_arena:pafiledbphp arena pafiledbeq3.1
php_arena:pafiledbphp arena pafiledbeq3.0_beta_3.1
php_arena:pafiledbphp arena pafiledbeq1.1.3

CPE	Name	Operator	Version
php_arena:pafiledb	php arena pafiledb	eq	3.0
php_arena:pafiledb	php arena pafiledb	eq	2.1.1
php_arena:pafiledb	php arena pafiledb	eq	3.1
php_arena:pafiledb	php arena pafiledb	eq	3.0_beta_3.1
php_arena:pafiledb	php arena pafiledb	eq	1.1.3

References

marc.info/?l=bugtraq&m=111065796525043&w=2

www.securityfocus.com/bid/12788

exchange.xforce.ibmcloud.com/vulnerabilities/19688

8.6 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

60.5%

JSON

Related for CVE-2005-0781

nessus2