Php Arena : Security Vulnerabilities, CVEs, Published In 2004
Cross-site scripting (XSS) vulnerability in the category module in pafiledb.php for paFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter, a vulnerability that is closely related to CVE-2004-1551.
Max CVSS
4.3
EPSS Score
0.29%
Published
2004-04-27
Updated
2017-07-11
paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1) login.php, (2) category.php, (3) search.php, (4) main.php, (5) viewall.php, (6) download.php, (7) email.php, (8) file.php, (9) rate.php, or (10) stats.php, which reveals the path in an error message.
Max CVSS
5.0
EPSS Score
0.55%
Published
2004-04-27
Updated
2017-07-11
Cross-site scripting (XSS) vulnerability in the (1) email or (2) file modules in paFileDB 3.1 Final allows remote attackers to execute arbitrary web script or HTML via the id parameter.
Max CVSS
4.3
EPSS Score
0.17%
Published
2004-12-31
Updated
2017-07-11
3 vulnerabilities found