php arena vulnerabilities

Recent CVEs affecting php arena products. 32 tracked.

php arena has 32 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2007-08-08. Highest priority: CVE-2006-5079 (score 58/100).

• CVE-2007-4183 HIGH 7.5 UPGRADE SQL injection vulnerability in main.php in paBugs 2.0 Beta 3 and earlier allows remote attackers to execute ar
• CVE-2007-3808 HIGH 7.5 DOWNGRADE SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrar
• CVE-2006-5079 HIGH 7.5 UPGRADE PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and earlier allo
• CVE-2006-2361 HIGH 7.5 DOWNGRADE DOWNGRADE PHP remote file inclusion vulnerability in pafiledb_constants.php in Download Manager (mxBB pafiledb) integrat
• CVE-2006-2209 MEDIUM 6.4 DOWNGRADE Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to exe
• CVE-2005-4329 HIGH 7.5 DOWNGRADE SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remo
• CVE-2005-2723 HIGH 7.5 DOWNGRADE SQL injection vulnerability in auth.php in PaFileDB 3.1, when authmethod is set to cookies, allows remote atta
• CVE-2005-2014 MEDIUM 4.6 DOWNGRADE The "upload a language pack" feature in paFAQ 1.0 Beta 4 allows remote authenticated administrators to execute
• CVE-2005-2013 MEDIUM 5.0 DOWNGRADE paFAQ 1.0 Beta 4 allows remote attackers to obtain sensitive information via a direct request to admin/backup.
• CVE-2005-2012 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in login in paFAQ 1.0 Beta 4 allow remote attackers to execute arbitrar
• CVE-2005-2011 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in paFAQ 1.0 Beta 4 allow remote attackers to inject arbit
• CVE-2005-2001 MEDIUM 5.0 DOWNGRADE Directory traversal vulnerability in pafiledb.php in paFileDB 3.1 and earlier allows remote attackers to inclu
• CVE-2005-2000 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary
• CVE-2005-1999 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in pafiledb.php in paFileDB 3.1 allow remote attackers to
• CVE-2005-0952 MEDIUM 5.0 DOWNGRADE Cross-site scripting vulnerability in pafiledb.php in PaFileDB 3.1 allows remote attackers to inject arbitrary
• CVE-2005-0782 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1 and earlier
• CVE-2005-0781 HIGH 7.5 DOWNGRADE SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote
• CVE-2005-0780 MEDIUM 5.0 DOWNGRADE paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) a
• CVE-2005-0724 MEDIUM 5.0 UPGRADE paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via (1) an invalid str parame
• CVE-2005-0723 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the jumpmenu function in functions.php for paFileDB 3.1 and earlie
• CVE-2005-0674 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the News module for paBox 1.6 allows remote attackers to inject ar
• CVE-2005-0647 MEDIUM 5.0 DOWNGRADE admin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the (1) $form[commen
• CVE-2005-0646 HIGH 7.5 DOWNGRADE SQL injection vulnerability in auth.php in paNews 2.0.4b allows remote attackers to execute arbitrary SQL via
• CVE-2005-0475 MEDIUM 6.4 DOWNGRADE SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute ar
• CVE-2005-0327 HIGH 7.5 DOWNGRADE pafiledb.php in Pafiledb 3.1 may allow remote attackers to execute arbitrary PHP code via a modified action pa
• CVE-2005-0326 MEDIUM 5.0 DOWNGRADE pafiledb.php in PaFileDB 3.1 allows remote attackers to gain sensitive information via an invalid or missing a
• CVE-2004-1975 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the category module in pafiledb.php for paFileDB 3.1 allows remote
• CVE-2004-1974 MEDIUM 5.0 DOWNGRADE paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1) login.php, (2)
• CVE-2004-1551 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the (1) email or (2) file modules in paFileDB 3.1 Final allows rem
• CVE-2004-1219 MEDIUM 5.0 DOWNGRADE paFileDB 3.1, when using sessions authentication and while the administrator logs on, allows remote attackers
• CVE-2002-1931 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inje
• CVE-2002-1929 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote

FAQ

How do I fix php arena vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is php arena being exploited right now?

None of the tracked php arena CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which php arena CVE should I patch first?

CVE-2006-5079 currently ranks highest (58/100): PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and earlier allo.

Products

• pabox
• pabugs
• pacheckbook
• pafaq
• pafiledb
• panews

RSS feed for php arena · ← Back to latest CVEs