Description (CNA)
SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter to pafiledb.php.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19688
- http://marc.info/?l=bugtraq&m=111065796525043&w=2
- http://www.securityfocus.com/bid/12788
ADP enrichment
No English description supplied.