Total vulnerabilities in the database
pafiledb.php in Pafiledb 3.1 may allow remote attackers to execute arbitrary PHP code via a modified action parameter that is used in an include statement for login.php.
Software | From | Fixed in |
---|---|---|
php_arena / pafiledb | 3.1 | 3.1.x |