CVE-2005-0952

Cross-site scripting vulnerability in pafiledb.php in PaFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2005-0327

pafiledb.php in Pafiledb 3.1 may allow remote attackers to execute arbitrary PHP code via a modified action parameter that is used in an include statement for login.php...

paFileDB31XSS.txt

Vulnerable System : paFileDB 3.1 and less exploit : http://target/pafiledb.php?action="alertdocument.cookie discovered by : neO SecurityGurus Team www.securitygurus.net...

PaFileDB.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Severity: Medium Title: PaFileDB Version 3.1 and below are exploitable via a XSS and a SQL injection vulnerability Date: 31/03/2005 Vendor: PhpArena Vendor...

Pafiledb ACTION Parameter XSS

Vulnerable System : paFileDB 3.1 and less exploit : http://target/pafiledb.php?action="scriptalertdocument.cookie/script discovered by : neO SecurityGurus Team www.securitygurus.net...

CVE-2005-0952

Cross-site scripting vulnerability in pafiledb.php in PaFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2005-0952

CVE-2005-0952 describes a cross-site scripting vulnerability in the PaFileDB 3.1 web application, specifically in pafiledb.php where the attacker can inject arbitrary script via the id parameter. The vulnerability is documented across multiple sources (NVD/Nessus/NVD CVE record). Exploitation cou...

CVE-2005-0952: Undefined Security Weakness

Cross-site scripting vulnerability in pafiledb.php in PaFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter...

PaFileDB Version 3.1 and below are exploitable via a XSS and a SQL injection vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Severity: Medium Title: PaFileDB Version 3.1 and below are exploitable via a XSS and a SQL injection vulnerability Date: 31/03/2005 Vendor: PhpArena Vendor...

CVE-2005-0780

paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 auth.php, 2 login.php, 3 category.php, 4 file.php, 5 team.php, 6 license.php, 7 custom.php, 8 admins.php, or 9 backupdb.php, which reveal the path in a PHP error message...

CVE-2005-0781

SQL injection vulnerability in 1 viewall.php and 2 category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter to pafiledb.php...

CVE-2005-0782

CVE-2005-0782 is a cross-site scripting (XSS) vulnerability in paFileDB 3.1 and earlier, affecting viewall.php and category.php. The start parameter to pafiledb.php enables remote attackers to inject arbitrary script/HTML. The NVD entry notes MEDIUM impact (I partial) with CVSS v2.0 base score 4....

CVE-2005-0780

CVE-2005-0780 affects paFileDB 3.1 and earlier, where remote attackers can trigger PHP errors via direct requests to auth.php, login.php, category.php, file.php, team.php, license.php, custom.php, admins.php, or backupdb.php, revealing the server path and potentially sensitive information. The pu...

CVE-2005-0782

Cross-site scripting XSS vulnerability in 1 viewall.php and 2 category.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the start parameter to pafiledb.php...

CVE-2005-0781

CVE-2005-0781 affects paFileDB 3.1 and earlier, with SQL injection in viewall.php and category.php via the start parameter to pafiledb.php, enabling remote execution of arbitrary SQL commands. The vulnerability is documented in NVD as a SQLi in paFileDB 3.1 and earlier; exploitation details are n...

CVE-2005-0781: Undefined Security Weakness

SQL injection vulnerability in 1 viewall.php and 2 category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter to pafiledb.php...

CVE-2005-0780: Undefined Security Weakness

paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 auth.php, 2 login.php, 3 category.php, 4 file.php, 5 team.php, 6 license.php, 7 custom.php, 8 admins.php, or 9 backupdb.php, which reveal the path in a PHP error message...

CVE-2005-0782: Undefined Security Weakness

Cross-site scripting XSS vulnerability in 1 viewall.php and 2 category.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the start parameter to pafiledb.php...

pafileDB31.txt

-= SecurityReason-2005-SRA03 =- -= SQL injection and XSS in paFileDB =- Author: sp3x Date: 12 March 2005 Affected software : =================== paFileDB version : =3.1 Description : ============= paFileDB is designed to allow webmasters have a database of files for download on their site. To add...

paFileDB Detection

The remote host is running paFileDB, a web-based download management script written in PHP. Note that the software's homepage, formerly at http://www.phparena.net/pafiledb.php, no longer exists, and the associated domain is parked, suggesting that the software is no longer supported. C Tenable...