pafiledb vulnerabilities and fixes

Recent CVEs affecting pafiledb, with upgrade or downgrade steps. 21 tracked.

pafiledb has 21 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-07-17. Highest priority: CVE-2006-2361 (score 53/100).

• CVE-2007-3808 HIGH 7.5 DOWNGRADE SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrar
• CVE-2006-2361 HIGH 7.5 DOWNGRADE DOWNGRADE PHP remote file inclusion vulnerability in pafiledb_constants.php in Download Manager (mxBB pafiledb) integrat
• CVE-2005-4329 HIGH 7.5 DOWNGRADE SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remo
• CVE-2005-2723 HIGH 7.5 DOWNGRADE SQL injection vulnerability in auth.php in PaFileDB 3.1, when authmethod is set to cookies, allows remote atta
• CVE-2005-2001 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in pafiledb.php in paFileDB 3.1 and earlier allows remote attackers to inclu
• CVE-2005-2000 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary
• CVE-2005-1999 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in pafiledb.php in paFileDB 3.1 allow remote attackers to
• CVE-2005-0952 MEDIUM 5.0 DOWNGRADE Cross-site scripting vulnerability in pafiledb.php in PaFileDB 3.1 allows remote attackers to inject arbitrary
• CVE-2005-0782 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1 and earlier
• CVE-2005-0781 HIGH 7.5 DOWNGRADE SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote
• CVE-2005-0780 MEDIUM 5.0 DOWNGRADE paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) a
• CVE-2005-0724 MEDIUM 5.0 UPGRADE paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via (1) an invalid str parame
• CVE-2005-0723 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the jumpmenu function in functions.php for paFileDB 3.1 and earlie
• CVE-2005-0327 HIGH 7.5 DOWNGRADE pafiledb.php in Pafiledb 3.1 may allow remote attackers to execute arbitrary PHP code via a modified action pa
• CVE-2005-0326 MEDIUM 5.0 DOWNGRADE pafiledb.php in PaFileDB 3.1 allows remote attackers to gain sensitive information via an invalid or missing a
• CVE-2004-1975 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the category module in pafiledb.php for paFileDB 3.1 allows remote
• CVE-2004-1974 MEDIUM 5.0 DOWNGRADE paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1) login.php, (2)
• CVE-2004-1551 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the (1) email or (2) file modules in paFileDB 3.1 Final allows rem
• CVE-2004-1219 MEDIUM 5.0 DOWNGRADE paFileDB 3.1, when using sessions authentication and while the administrator logs on, allows remote attackers
• CVE-2002-1931 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inje
• CVE-2002-1929 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote

FAQ

How do I fix pafiledb vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is pafiledb being exploited right now?

None of the tracked pafiledb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which pafiledb CVE should I patch first?

CVE-2006-2361 currently ranks highest (53/100): PHP remote file inclusion vulnerability in pafiledb_constants.php in Download Manager (mxBB pafiledb) integrat.

RSS feed for pafiledb · ← Back to latest CVEs