SQL injection vulnerability in auth.php in PaFileDB 3.1, when authmethod is set to cookies, allows remote attackers to execute arbitrary SQL commands via the username value in the pafiledbcookie cookie.
| Software | From | Fixed in |
|---|---|---|
| php_arena / pafiledb | 3.1 | 3.1.x |