CVE-2005-1999

Multiple cross-site scripting XSS vulnerabilities in pafiledb.php in paFileDB 3.1 allow remote attackers to inject arbitrary web script or HTML via the 1 sortby or 2 filelist parameters to the category action category.php, or 3 pages parameter in the viewall action viewall.php...