PT-2005-1405 · Pafiledb · Pafiledb

Devil_Box · Published 2005-02-10 · Updated 2017-07-11 · CVE-2005-0327

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Pafiledb version 3.1

Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved by modifying the action parameter, which is used in an include statement for login.php.

Recommendations For Pafiledb version 3.1, consider restricting access to the pafiledb.php file until a patch is available, and avoid using the modified action parameter in the include statement for login.php.

Fix

Related Identifiers

CVE-2005-0327

Affected Products

Pafiledb

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-0327 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19176 · Note
• http://marc.info/?l=bugtraq&m=110720365923818&w=2 · Note