CVE-2005-0723

Cross-site scripting XSS vulnerability in the jumpmenu function in functions.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the URL parameters, which is not properly cleansed in the $pageurl variable, as demonstrated using pafiledb.php...

PHP Arena PAFileDB 3.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/12758/info Multiple remote cross-site scripting vulnerabilities affect PHP Arena PaFileDB. These issues are due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web content. An attacke...

PHP Arena PAFileDB 3.1 - Multiple Cross-Site Scripting Vulnerabilities

PHP Arena PAFileDB 3.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/12758/info Multiple remote cross-site scripting vulnerabilities affect PHP Arena PaFileDB. These issues are due to a failure of the application to properly sanitize user-supplied input...

CVE-2004-1551

The CVE-2004-1551 entry describes a Cross-site scripting (XSS) vulnerability in paFileDB 3.1 Final affecting the (1) email and (2) file modules. The attack path is via the id parameter, allowing remote attackers to execute arbitrary script/HTML in a victim’s browser. Affected product: paFileDB 3....

CVE-2004-1551

Cross-site scripting XSS vulnerability in the 1 email or 2 file modules in paFileDB 3.1 Final allows remote attackers to execute arbitrary web script or HTML via the id parameter...

CVE-2005-0327

The CVE-2005-0327 entry concerns paFileDB 3.1, where pafiledb.php may allow remote code execution. The vulnerability arises from a modified action parameter used in an include statement for login.php, enabling an attacker to have PHP code executed on the remote server. The provided documents desc...

CVE-2005-0326

pafiledb.php in PaFileDB 3.1 allows remote attackers to gain sensitive information via an invalid or missing action parameter, which reveals the path in an error message when it cannot include a login.php script...

CVE-2005-0327

pafiledb.php in Pafiledb 3.1 may allow remote attackers to execute arbitrary PHP code via a modified action parameter that is used in an include statement for login.php...

CVE-2005-0326

PaFileDB 3.1's pafiledb.php is vulnerable to information disclosure when the action parameter is invalid or missing, causing an error message that reveals the server path if login.php cannot be included. This is a remote-information-disclosure issue affecting PaFileDB 3.1 per CVE-2005-0326 (NVD/N...

[PersianHacker.net] Full Path Disclosure and PHP Injection In Pafiledb 3.1 Final

In the name of GOD Persianhacker.net Full Path Disclosure and PHP Injection In Pafiledb 3.1 Final PafileDB paFileDB is designed to allow webmasters have a database of files for download on their site. To add a download, all you do is upload the file using FTP or whatever method you use, log into...

CVE-2004-1551

Cross-site scripting XSS vulnerability in the 1 email or 2 file modules in paFileDB 3.1 Final allows remote attackers to execute arbitrary web script or HTML via the id parameter...

CVE-2004-1219

paFileDB 3.1, when using sessions authentication and while the administrator logs on, allows remote attackers to read the administrator's password hash and conduct brute force password guessing attacks by listing the contents of the sessions directory and reading the associated file for the...

CVE-2004-1219

PaFileDB

Echo Security Advisory 2004.9

ECHOADV09$2004 --------------------------------------------------------------------------- Multiple Vulnerabilities in paFileDB 3.1 --------------------------------------------------------------------------- Author: y3dips Date: November, 26th 2004 Location: Indonesia, Jakarta Web:...

Multiple Vulnerabilities in paFileDB 3.1

ECHOADV09$2004 --------------------------------------------------------------------------- Multiple Vulnerabilities in paFileDB 3.1 --------------------------------------------------------------------------- Author: y3dips Date: November, 26th 2004 Location: Indonesia, Jakarta Web:...

paFileDB sessions Directory Admin Hashed Password Disclosure

According to its version number, the remote installation of paFileDB is vulnerable to an attack that would allow the attacker to view the password hash of user accounts, including an administrator account, by making a direct request to the application's 'sessions' directory. This could allow an...

PAFileDB Multiple Information Disclosure Vulnerabilities

Binary data 2445.prm...

PAFileDB Multiple Script Error Message Path Disclosure

There is a flaw in the remote version of paFileDB that may let an attacker obtain the physical path of the remote installation by sending a malformed request to one of the scripts 'admins.php', 'category.php', or 'team.php'. This information may help an attacker make more focused attacks against...

PAFileDB 3.1 - Error Message Full Path Disclosure

PAFileDB 3.1 - Error Message Full Path Disclosure source: https://www.securityfocus.com/bid/11817/info paFileDB is prone to an installation path disclosure. If invalid requests are made to certain scripts, the installation path is included in the returned error message...

PAFileDB 3.1 - Error Message Full Path Disclosure

source: https://www.securityfocus.com/bid/11817/info paFileDB is prone to an installation path disclosure. If invalid requests are made to certain scripts, the installation path is included in the returned error message. http://www.example.com/pafiledb/includes/admin/admins.php...