Skip to content
Noroxi

php arena records

32 published records for vendor php arena.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
14
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

      The weakness classes this vendor ships most often: where to look.

      CWE

      Attack profile

      All records

      32 records
      • CVE-2006-2361
        31Monitor

        PHP remote file inclusion vulnerability in pafiledb_constants.php in Download Manager (mxBB pafiledb) integration, as used with phpBB, allow

        HighCVSS 7.5Proof of conceptEPSS 3%

        mxbb · mxbb portalMay 15, 2006

      • CVE-2006-5079
        31Monitor

        PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and earlier allows remote attackers to execute

        HighCVSS 7.5Proof of conceptEPSS 2%

        php arena · pabugsSep 28, 2006

      • CVE-2007-3808
        31Monitor

        SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrary SQL commands via the categor

        HighCVSS 7.5Proof of conceptEPSS 2%

        php arena · pafiledbJul 16, 2007

      • CVE-2005-2000
        31Monitor

        Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary SQL commands via the formname

        HighCVSS 7.5Proof of conceptEPSS 2%

        php arena · pafiledbJun 15, 2005

      • CVE-2005-0781
        31Monitor

        SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrary

        HighCVSS 7.5Proof of conceptEPSS 2%

        php arena · pafiledbMay 2, 2005

      • CVE-2005-0327
        31Monitor

        pafiledb.php in Pafiledb 3.1 may allow remote attackers to execute arbitrary PHP code via a modified action parameter that is used in an inc

        HighCVSS 7.5No exploitEPSS 1%

        php arena · pafiledbMay 2, 2005

      • CVE-2005-2723
        30Monitor

        SQL injection vulnerability in auth.php in PaFileDB 3.1, when authmethod is set to cookies, allows remote attackers to execute arbitrary SQL

        HighCVSS 7.5No exploitEPSS 1%

        php arena · pafiledbAug 30, 2005

      • CVE-2005-2012
        30Monitor

        Multiple SQL injection vulnerabilities in login in paFAQ 1.0 Beta 4 allow remote attackers to execute arbitrary SQL commands and bypass auth

        HighCVSS 7.5Proof of conceptEPSS 1%

        php arena · pafaqJun 20, 2005

      • CVE-2005-4329
        30Monitor

        SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attackers to execute arbitr

        HighCVSS 7.5Proof of conceptEPSS 1%

        php arena · pafiledbDec 17, 2005

      • CVE-2005-0646
        30Monitor

        SQL injection vulnerability in auth.php in paNews 2.0.4b allows remote attackers to execute arbitrary SQL via the mysql_prefix parameter.

        HighCVSS 7.5No exploitEPSS 1%

        php arena · panewsMay 2, 2005

      • CVE-2007-4183
        30Monitor

        SQL injection vulnerability in main.php in paBugs 2.0 Beta 3 and earlier allows remote attackers to execute arbitrary SQL commands via the c

        HighCVSS 7.5Proof of conceptEPSS 1%

        php arena · pabugsAug 7, 2007

      • CVE-2006-2209
        25Monitor

        Multiple SQL injection vulnerabilities in index.php in PHP Arena paCheckBook 1.1 allow remote attackers to execute arbitrary SQL commands vi

        MediumCVSS 6.4Proof of conceptEPSS 1%

        php arena · pacheckbookMay 5, 2006

      • CVE-2005-0475
        25Monitor

        SQL injection vulnerability in paFAQ Beta4, and possibly other versions, allows remote attackers to execute arbitrary SQL code via the (1) o

        MediumCVSS 6.4Proof of conceptEPSS 1%

        php arena · pafaqMar 30, 2005

      • CVE-2005-0952
        22Monitor

        Cross-site scripting vulnerability in pafiledb.php in PaFileDB 3.1 allows remote attackers to inject arbitrary web script or HTML via the id

        MediumCVSS 5.0Proof of conceptEPSS 5%

        php arena · pafiledbMay 2, 2005

      • CVE-2005-0780
        22Monitor

        paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, (2) login.php, (3) ca

        MediumCVSS 5.0Proof of conceptEPSS 5%

        php arena · pafiledbMar 12, 2005

      • CVE-2005-0647
        21Monitor

        admin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the (1) $form[comments] or (2) $form[autoapprove]

        MediumCVSS 5.0Proof of conceptEPSS 4%

        php arena · panewsMay 2, 2005

      • CVE-2004-1219
        21Monitor

        paFileDB 3.1, when using sessions authentication and while the administrator logs on, allows remote attackers to read the administrator's pa

        MediumCVSS 5.0No exploitEPSS 2%

        php arena · pafiledbJan 10, 2005

      • CVE-2005-2001
        21Monitor

        Directory traversal vulnerability in pafiledb.php in paFileDB 3.1 and earlier allows remote attackers to include arbitrary files via a ..

        MediumCVSS 5.0No exploitEPSS 1%

        php arena · pafiledbJun 15, 2005

      • CVE-2005-2013
        20Monitor

        paFAQ 1.0 Beta 4 allows remote attackers to obtain sensitive information via a direct request to admin/backup.php, which contains a backup o

        MediumCVSS 5.0No exploitEPSS 1%

        php arena · pafaqJun 20, 2005

      • CVE-2005-0724
        20Monitor

        paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via (1) an invalid str parameter to pafiledb.php, or a dire

        MediumCVSS 5.0No exploitEPSS 1%

        php arena · pafiledbMay 2, 2005

      • CVE-2004-1974
        20Monitor

        paFileDB 3.1 allows remote attackers to gain sensitive information via a direct request to (1) login.php, (2) category.php, (3) search.php,

        MediumCVSS 5.0No exploitEPSS 1%

        php arena · pafiledbApr 27, 2004

      • CVE-2005-0326
        20Monitor

        pafiledb.php in PaFileDB 3.1 allows remote attackers to gain sensitive information via an invalid or missing action parameter, which reveals

        MediumCVSS 5.0No exploitEPSS 1%

        php arena · pafiledbMay 2, 2005

      • CVE-2005-0782
        18Monitor

        Cross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1 and earlier allows remote attackers to inj

        MediumCVSS 4.3Proof of conceptEPSS 3%

        php arena · pafiledbMay 2, 2005

      • CVE-2004-1551
        18Monitor

        Cross-site scripting (XSS) vulnerability in the (1) email or (2) file modules in paFileDB 3.1 Final allows remote attackers to execute arbit

        MediumCVSS 4.3Proof of conceptEPSS 2%

        php arena · pafiledbDec 31, 2004

      • CVE-2002-1929
        18Monitor

        Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attackers to inject arbitrary

        MediumCVSS 4.3Proof of conceptEPSS 1%

        php arena · pafiledbDec 31, 2002