CVE-2007-3808

PaFileDB 3.6 is affected by an SQL injection in includes/search.php via the categories[] parameter in a search action to index.php, as per CVE-2007-3808. The root cause is unsanitized input in the search categories array, enabling remote SQL execution. This vector is described as different from C...