PaFileDB 3.1 - SQL-Injection

SePro Advisory 5 PaFileDB 3.1 - SQL-Injection =========================================================== Vendor: PhpArena URL: http://www.phparena.net/ Date: 17.08.05 App.: PaFileDB Version: 3.1 Type: SQL-Injection Risc: High Credits: ================================ Newangels &...

paFileDB auth.php pafiledbcookie Cookie SQL Injection

The remote version of paFileDB suffers from a flaw by which an attacker can gain access to the application's administrative control panel by means of a SQL injection attack via a specially crafted cookie. Note that successful exploitation requires that paFileDB be configured with '$authmethod' se...

PaFileDB31SQL.txt

SePro Advisory 5 PaFileDB 3.1 - SQL-Injection =========================================================== Vendor: PhpArena URL: http://www.phparena.net/ Date: 17.08.05 App.: PaFileDB Version: 3.1 Type: SQL-Injection Risc: High Credits: ================================ Newangels &...

CVE-2002-1929

Technical details about CVE-2002-1929 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2002-1931

Cross-site scripting XSS vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the search string...

CVE-2002-1929

Cross-site scripting XSS vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attackers to inject arbitrary web script or HTML via the query string in the 1 rate, 2 email, or 3 download actions...

CVE-2002-1931

The CVE-2002-1931 entry concerns a cross-site scripting (XSS) flaw in PHP Arena paFileDB versions 1.1.3 and 2.1.1. The vulnerability arises from insufficient input sanitization in the search string, allowing an attacker to inject arbitrary JavaScript/HTML that could execute in a user’s browser. A...

CVE-2002-1929: Undefined Security Weakness

Cross-site scripting XSS vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attackers to inject arbitrary web script or HTML via the query string in the 1 rate, 2 email, or 3 download actions...

CVE-2002-1931: Undefined Security Weakness

Cross-site scripting XSS vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the search string...

paFiledb31vuln.txt

GulfTech Security Research June 14th, 2005 Vendor : php Arena URL : http://www.phparena.net/pafiledb.php Version : paFileDB 3.1 && Earlier Risk : Multiple Vulnerabilities Description: paFileDB is a popular open source web application offered by php Arena. paFileDB allows webmasters to open up an...

paFileDB fails to properly sanitize "query" parameter in "pafiledb.php"

Overview paFileDB works around the default "off" state for the "registerglobals" security directive in PHP and then fails to initialize the "query" variable, which can be used to inject arbitrary SQL queries. Description "paFileDB is designed to allow webmasters have a database of files for...

CVE-2005-2001

Directory traversal vulnerability in pafiledb.php in paFileDB 3.1 and earlier allows remote attackers to include arbitrary files via a .. dot dot in the action parameter...

CVE-2005-1999

CVE-2005-1999 corresponds to multiple XSS vulnerabilities in paFileDB 3.1 (paFileDB 3.1) where an attacker can inject arbitrary script or HTML via the sortby, filelist (category.php) or pages (viewall.php) parameters. The affected component is pafiledb.php; root cause is improper sanitization of ...

CVE-2005-2000

Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary SQL commands via the formname parameter 1 in the login form, 2 in the team login form, or 3 to auth.php, 4 select, 5 id, or 6 query parameter to pafiledb.php, or 7 string parameter to...

CVE-2005-2000

CVE-2005-2000 concerns multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier . The affected vectors allow remote attackers to execute arbitrary SQL commands via several inputs, specifically: the second formname parameter in login forms, the team login form, and the inputs to pafiledb...

CVE-2005-2001

CVE-2005-2001 : The vulnerability affects paFileDB 3.1 and earlier, where a directory traversal flaw allows remote attackers to include arbitrary files via ".." in the action parameter. The NVD/CVE entries concur on the description, with a CVSS v2 base score of 5.0 (Medium) and links to historica...

CVE-2005-2001: Undefined Security Weakness

Directory traversal vulnerability in pafiledb.php in paFileDB 3.1 and earlier allows remote attackers to include arbitrary files via a .. dot dot in the action parameter...

CVE-2005-2000: Undefined Security Weakness

Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary SQL commands via the formname parameter 1 in the login form, 2 in the team login form, or 3 to auth.php, 4 select, 5 id, or 6 query parameter to pafiledb.php, or 7 string parameter to...

CVE-2005-1999: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in pafiledb.php in paFileDB 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 sortby or 2 filelist parameters to the category action category.php, or 3 pages parameter in the viewall action viewall.php...

paFileDB113.pl.txt

!/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR: PHP Arena paFileDB 1.1.3 And 0lder Expl0it By: A l p h a P r o g r a m m e r Sirus-v Email: [email protected] + Discovered By: GulfTech + Advisory: http://www.securityfocus.com/bid/13967 Vulnerable...