PAFileDB 1.1.3/2.1.1/3.0/3.1 viewall.php start Parameter SQL Injection

ID SSV:78880
Type seebug
Reporter Root
Modified 2014-07-01T00:00:00


No description provided by source.


Multiple SQL injection and cross-site scripting vulnerabilities exist in paFileDB. These issues are reported to exist in the 'viewall.php' and 'category.php' scripts.

Exploitation of these issues may allow for compromise of the software, session hijacking, or attacks against the underlying database.[pafiledb_dir]/pafiledb.php?action=viewall&start='&sortby=rating