CVE-2005-0782 Cross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the start parameter to....
MediumCVSS 4.3
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the start parameter to pafiledb.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php arena pafiledb | = 1.1.3 | No fix listed |
| php arena pafiledb | = 2.1.1 | No fix listed |
| php arena pafiledb | = 3.0 | No fix listed |
| php arena pafiledb | = 3.0_beta_3.1 | No fix listed |
| php arena pafiledb | = 3.1 | No fix listed |
References
- digitalparadox.org exploit
- 20050312 [SECURITYREASON.COM] SQL injection and XSS in paFileDB mailing-list
- 20050330 PaFileDB Version 3.1 and below are exploitable via a XSS and a SQL injection vulnerability mailing-list
- 12788 exploit vdb-entry
- pafiledb-viewall-category-xss(19690) vdb-entry