Total vulnerabilities in the database
SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter to pafiledb.php.
Software | From | Fixed in |
---|---|---|
php_arena / pafiledb | 3.0 | 3.0.x |
php_arena / pafiledb | 2.1.1 | 2.1.1.x |
php_arena / pafiledb | 3.1 | 3.1.x |
php_arena / pafiledb | 3.0_beta_3.1 | 3.0_beta_3.1.x |
php_arena / pafiledb | 1.1.3 | 1.1.3.x |