CVE-2005-2723 SQL injection vulnerability in auth.php in PaFileDB 3.1, when authmethod is set to cookies, allows remote attackers to execute arbitrary SQL commands via the username value in the pafiledbcookie cooki...
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in auth.php in PaFileDB 3.1, when authmethod is set to cookies, allows remote attackers to execute arbitrary SQL commands via the username value in the pafiledbcookie cookie.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php arena pafiledb | = 3.1 | No fix listed |
References
- 20050824 PaFileDB 3.1 - SQL-Injection mailing-list
- 16566 third-party-advisory vendor-advisory
- www.security-project.org patch vendor-advisory
- 14654 exploit vdb-entry
- pafiledb-auth-sql-injection(21988) vdb-entry