192 matches found
Multiple paFileDB Vulnerabilities
GulfTech Security Research June 14th, 2005 Vendor : php Arena URL : http://www.phparena.net/pafiledb.php Version : paFileDB 3.1 && Earlier Risk : Multiple Vulnerabilities Description: paFileDB is a popular open source web application offered by php Arena. paFileDB allows webmasters to open up an...
CVE-2005-1999
Multiple cross-site scripting XSS vulnerabilities in pafiledb.php in paFileDB 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 sortby or 2 filelist parameters to the category action category.php, or 3 pages parameter in the viewall action viewall.php...
CVE-2005-2001
Directory traversal vulnerability in pafiledb.php in paFileDB 3.1 and earlier allows remote attackers to include arbitrary files via a .. dot dot in the action parameter...
CVE-2005-2000
Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary SQL commands via the formname parameter 1 in the login form, 2 in the team login form, or 3 to auth.php, 4 select, 5 id, or 6 query parameter to pafiledb.php, or 7 string parameter to...
PHP Arena 1.1.3 - pafiledb.php Remote Change Password
PHP Arena 1.1.3 - pafiledb.php Remote Change Password !/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR: PHP Arena paFileDB 1.1.3 And 0lder Expl0it By: A l p h a P r o g r a m m e r Sirus-v Email: [email protected] + Discovered By: GulfTech +...
PHP Arena <= 1.1.3 pafiledb.php Remote Change Password Exploit
Exploit for unknown platform in category web applications ============================================================== PHP Arena mhp0rtal -- oilKarchack -- DrCephaleX -- Str0ke And...
PAFileDB 1.1.32.1.13.03.1 - Multiple Input Validation Vulnerabilities
PAFileDB 1.1.32.1.13.03.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/13967/info paFileDB is prone to multiple input validation vulnerabilities. The following issues are reported: Multiple SQL injection issues exist in paFileDB. The impact of these issues...
PHP Arena <= 1.1.3 pafiledb.php Remote Change Password Exploit
No description provided by source. !/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR: PHP Arena paFileDB 1.1.3 And 0lder Expl0it By: A l p h a P r o g r a m m e r Sirus-v Email: [email protected] + Discovered By: GulfTech + Advisory:...
PAFileDB 1.1.3/2.1.1/3.0/3.1 - Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/13967/info paFileDB is prone to multiple input validation vulnerabilities. The following issues are reported: Multiple SQL injection issues exist in paFileDB. The impact of these issues will vary depending on features supported by the database...
PHP Arena 1.1.3 - 'pafiledb.php' Remote Change Password
!/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR: PHP Arena paFileDB 1.1.3 And 0lder Expl0it By: A l p h a P r o g r a m m e r Sirus-v Email: [email protected] + Discovered By: GulfTech + Advisory: https://www.securityfocus.com/bid/13967 Vulnerabl...
CVE-2004-1975
Cross-site scripting XSS vulnerability in the category module in pafiledb.php for paFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a vulnerability that is closely related to CVE-2004-1551...
CVE-2004-1975
The CVE-2004-1975 issue affects paFileDB 3.1 and specifically the category module (pafiledb.php) . It is an XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the id parameter . The vulnerability is described as closely related to CVE-2004-1551. No further t...
CVE-2004-1974
paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to 1 login.php, 2 category.php, 3 search.php, 4 main.php, 5 viewall.php, 6 download.php, 7 email.php, 8 file.php, 9 rate.php, or 10 stats.php, which reveals the path in an error message...
CVE-2004-1974
paFileDB 3.1 is affected by an information disclosure vulnerability where remote attackers can learn sensitive path information by issuing direct requests to pages (login.php, category.php, search.php, main.php, viewall.php, download.php, email.php, file.php, rate.php, stats.php). The underlying ...
CVE-2004-1975: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the category module in pafiledb.php for paFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a vulnerability that is closely related to CVE-2004-1551...
CVE-2004-1974: Undefined Security Weakness
paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to 1 login.php, 2 category.php, 3 search.php, 4 main.php, 5 viewall.php, 6 download.php, 7 email.php, 8 file.php, 9 rate.php, or 10 stats.php, which reveals the path in an error message...
CVE-2005-0724
paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via 1 an invalid str parameter to pafiledb.php, or a direct request to 2 viewall.php, 3 stats.php, 4 search.php, 5 rate.php, 6 main.php, 7 license.php, 8 category.php, 9 download.php, 10 file.php, 11 email.php, or 12...
CVE-2005-0781
SQL injection vulnerability in 1 viewall.php and 2 category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter to pafiledb.php...
CVE-2005-0326
pafiledb.php in PaFileDB 3.1 allows remote attackers to gain sensitive information via an invalid or missing action parameter, which reveals the path in an error message when it cannot include a login.php script...
CVE-2005-0782
Cross-site scripting XSS vulnerability in 1 viewall.php and 2 category.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the start parameter to pafiledb.php...