CVE-2004-1975 Cross-site scripting (XSS) vulnerability in the category module in pafiledb.php for paFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a vulnerability th...
MediumCVSS 4.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the category module in pafiledb.php for paFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a vulnerability that is closely related to CVE-2004-1551.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php arena pafiledb | = 3.0 | No fix listed |
| php arena pafiledb | = 3.0_beta_3.1 | No fix listed |
| php arena pafiledb | = 3.1 | No fix listed |
References
- 20040427 Multiple vulnerabilities paFileDB mailing-list
- 20040925 New XSS vulnerabilities in paFileDB 3.1 final mailing-list
- 10229 vdb-entry vendor-advisory
- pafiledb-pafiledbphp-xss(15992) vdb-entry