171 matches found
CVE-2002-1931
Cross-site scripting XSS vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the search string...
CVE-2002-1929
Cross-site scripting XSS vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attackers to inject arbitrary web script or HTML via the query string in the 1 rate, 2 email, or 3 download actions...
CVE-2002-1931
The CVE-2002-1931 entry concerns a cross-site scripting (XSS) flaw in PHP Arena paFileDB versions 1.1.3 and 2.1.1. The vulnerability arises from insufficient input sanitization in the search string, allowing an attacker to inject arbitrary JavaScript/HTML that could execute in a user’s browser. A...
paFiledb31vuln.txt
GulfTech Security Research June 14th, 2005 Vendor : php Arena URL : http://www.phparena.net/pafiledb.php Version : paFileDB 3.1 && Earlier Risk : Multiple Vulnerabilities Description: paFileDB is a popular open source web application offered by php Arena. paFileDB allows webmasters to open up an...
paFileDB fails to properly sanitize "query" parameter in "pafiledb.php"
Overview paFileDB works around the default "off" state for the "registerglobals" security directive in PHP and then fails to initialize the "query" variable, which can be used to inject arbitrary SQL queries. Description "paFileDB is designed to allow webmasters have a database of files for...
CVE-2005-2001
Directory traversal vulnerability in pafiledb.php in paFileDB 3.1 and earlier allows remote attackers to include arbitrary files via a .. dot dot in the action parameter...
CVE-2005-1999
CVE-2005-1999 corresponds to multiple XSS vulnerabilities in paFileDB 3.1 (paFileDB 3.1) where an attacker can inject arbitrary script or HTML via the sortby, filelist (category.php) or pages (viewall.php) parameters. The affected component is pafiledb.php; root cause is improper sanitization of ...
CVE-2005-2000
CVE-2005-2000 concerns multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier . The affected vectors allow remote attackers to execute arbitrary SQL commands via several inputs, specifically: the second formname parameter in login forms, the team login form, and the inputs to pafiledb...
CVE-2005-2000
Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary SQL commands via the formname parameter 1 in the login form, 2 in the team login form, or 3 to auth.php, 4 select, 5 id, or 6 query parameter to pafiledb.php, or 7 string parameter to...
CVE-2005-2001
CVE-2005-2001 : The vulnerability affects paFileDB 3.1 and earlier, where a directory traversal flaw allows remote attackers to include arbitrary files via ".." in the action parameter. The NVD/CVE entries concur on the description, with a CVSS v2 base score of 5.0 (Medium) and links to historica...
paFileDB113.pl.txt
!/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR: PHP Arena paFileDB 1.1.3 And 0lder Expl0it By: A l p h a P r o g r a m m e r Sirus-v Email: [email protected] + Discovered By: GulfTech + Advisory: http://www.securityfocus.com/bid/13967 Vulnerable...
Multiple paFileDB Vulnerabilities
GulfTech Security Research June 14th, 2005 Vendor : php Arena URL : http://www.phparena.net/pafiledb.php Version : paFileDB 3.1 && Earlier Risk : Multiple Vulnerabilities Description: paFileDB is a popular open source web application offered by php Arena. paFileDB allows webmasters to open up an...
CVE-2005-1999
Multiple cross-site scripting XSS vulnerabilities in pafiledb.php in paFileDB 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 sortby or 2 filelist parameters to the category action category.php, or 3 pages parameter in the viewall action viewall.php...
CVE-2005-2000
Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary SQL commands via the formname parameter 1 in the login form, 2 in the team login form, or 3 to auth.php, 4 select, 5 id, or 6 query parameter to pafiledb.php, or 7 string parameter to...
CVE-2005-2001
Directory traversal vulnerability in pafiledb.php in paFileDB 3.1 and earlier allows remote attackers to include arbitrary files via a .. dot dot in the action parameter...
PHP Arena 1.1.3 - pafiledb.php Remote Change Password
PHP Arena 1.1.3 - pafiledb.php Remote Change Password !/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR: PHP Arena paFileDB 1.1.3 And 0lder Expl0it By: A l p h a P r o g r a m m e r Sirus-v Email: [email protected] + Discovered By: GulfTech +...
PAFileDB 1.1.32.1.13.03.1 - Multiple Input Validation Vulnerabilities
PAFileDB 1.1.32.1.13.03.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/13967/info paFileDB is prone to multiple input validation vulnerabilities. The following issues are reported: Multiple SQL injection issues exist in paFileDB. The impact of these issues...
PHP Arena <= 1.1.3 pafiledb.php Remote Change Password Exploit
Exploit for unknown platform in category web applications ============================================================== PHP Arena mhp0rtal -- oilKarchack -- DrCephaleX -- Str0ke And...
PHP Arena <= 1.1.3 pafiledb.php Remote Change Password Exploit
No description provided by source. !/usr/bin/perl T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m EXPLOIT FOR: PHP Arena paFileDB 1.1.3 And 0lder Expl0it By: A l p h a P r o g r a m m e r Sirus-v Email: [email protected] + Discovered By: GulfTech + Advisory:...
PAFileDB 1.1.3/2.1.1/3.0/3.1 - Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/13967/info paFileDB is prone to multiple input validation vulnerabilities. The following issues are reported: Multiple SQL injection issues exist in paFileDB. The impact of these issues will vary depending on features supported by the database...