CVE-2004-1551 Cross-site scripting (XSS) vulnerability in the (1) email or (2) file modules in paFileDB 3.1 Final allows remote attackers to execute arbitrary web script or HTML via the id parameter.
MediumCVSS 4.3
EPSS 2.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in the (1) email or (2) file modules in paFileDB 3.1 Final allows remote attackers to execute arbitrary web script or HTML via the id parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php arena pafiledb | = 3.1 | No fix listed |
References
- 20040925 New XSS vulnerabilities in paFileDB 3.1 final mailing-list
- pafiledb-pafiledb-xss(17504) vdb-entry