Published: 31/12/2002 Updated: 05/09/2008

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 up to and including 3.0 allows remote malicious users to inject arbitrary web script or HTML via the query string in the (1) rate, (2) email, or (3) download actions.

Vulnerable Product	Search on Vulmon	Subscribe to Product
php arena pafiledb 3.0
php arena pafiledb 1.1.3
php arena pafiledb 2.1.1

source: wwwsecurityfocuscom/bid/6018/info PHP Arena paFileDB is prone to cross-site scripting attacks An attacker may construct a malicious link to the vulnerable script which contains arbitrary HTML and script code If this link is visited by a web user, the attacker-supplied code will execute in their web client in the security contex ...

NVD-CWE-Other http://online.securityfocus.com/archive/1/296387 http://www.securityfocus.com/bid/6018 http://www.securityfocus.com/bid/6019 http://www.securityfocus.com/bid/6020 http://www.iss.net/security_center/static/10416.php http://www.securiteam.com/unixfocus/6J00Q0A5PK.html https://nvd.nist.gov https://www.exploit-db.com/exploits/21957/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-1929

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect