SQL Injection Vulnerability in paFileDB 3.1 and Earlier: Remote Code Execution via start Parameter

SQL Injection Vulnerability in paFileDB 3.1 and Earlier: Remote Code Execution via start Parameter

CVE-2005-0781 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter to pafiledb.php.

Learn more about our Web Application Penetration Testing UK.