CVE-2002-1931

2022-10-0316:23:47

mitre

www.cve.org

php

arena

pafiledb

cross-site scripting

remote attackers

javascript

search string

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.6%

JSON

Cross-site scripting (XSS) vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the search string.

References

online.securityfocus.com/archive/1/296387

www.iss.net/security_center/static/10451.php

www.phparena.net/downloads/pafiledb.php?action=license&id=1&file=16

www.securityfocus.com/bid/6021