Multiple cross-site scripting (XSS) vulnerabilities in pafiledb.php in paFileDB 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) sortby or (2) filelist parameters to the category action (category.php), or (3) pages parameter in the viewall action (viewall.php).
References
Configurations
Information
Published : 2005-06-14 21:00
Updated : 2016-10-17 20:23
NVD link : CVE-2005-1999
Mitre link : CVE-2005-1999
JSON object : View
CWE
Products Affected
php_arena
- pafiledb