SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter to pafiledb.php.
Link | Tags |
---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/19688 | vdb entry |
http://marc.info/?l=bugtraq&m=111065796525043&w=2 | mailing list |
http://www.securityfocus.com/bid/12788 | vdb entry exploit |