Detections
Analytics
paFileDB <= 3.1 Multiple Vulnerabilities (1)
high Nessus Plugin ID 11806
Language:
Synopsis
The remote web server contains a PHP application that is affected by multiple vulnerabilities.Description
The remote host is running a version of paFileDB that is prone to a wide variety of vulnerabilities, including arbitrary file uploads, local file inclusion, SQL injection, and cross-site scripting issues.Solution
Upgrade to the latest version from PHP Arena. Note that fix released 31-Mar-2005 does not change the version number.See Also
Plugin Details
Severity: High
ID: 11806
File Name: pafiledb_cmd_exec.nasl
Version: 1.36
Type: remote
Family: CGI abuses
Published: 7/24/2003
Updated: 6/1/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.6
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
Required KB Items: www/pafiledb
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Vulnerability Publication Date: 9/25/2004
Reference Information
CVE: CVE-2004-1219, CVE-2004-1551, CVE-2004-1975, CVE-2005-0326, CVE-2005-0327, CVE-2005-0723, CVE-2005-0724, CVE-2005-0781, CVE-2005-0782