CVE-2002-1931 Cross-site scripting (XSS) vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the search string.
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the search string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php arena pafiledb | = 1.1.3 | No fix listed |
| php arena pafiledb | = 2.1.1 | No fix listed |
References
- 20021020 XSS vulnerabilites in Pafiledb mailing-list
- pafiledb-url-request-xss(10451) patch vdb-entry
- www.phparena.net
- 6021 patch vdb-entry