Detections
Analytics

paFileDB < 3.2 XSS and SQL Injection Vulnerabilities

medium Nessus Network Monitor Plugin ID 2686

Synopsis

The remote web server contains a script that is vulnerable to a SQL injection attack.

Description

PHP Arena paFileDB is a web application that is used to manage files. This version of paFileDB is vulnerable to a remote cross-site-scripting (XSS) flaw. Exploiting the flaw may enable an attacker to inject arbitrary script code into the browser of unsuspecting users. A successful attack would potentially allow the attacker the ability to view confidential data (cookies, authentication data, and more) or compromise the integrity of the local system via the web browser. The version of paFileDB is also vulnerable to a remote SQL injection attack. An attacker exploiting this flaw would only need to be able to send a query to the 'viewall.php' or 'category.php' script. A successful exploit would give the attacker the ability to read or write confidential data as well as potentially execute arbitrary commands on the remote web server.

Solution

Upgrade to version 3.2 or higher.

See Also

http://www.security-project.org/projects/board/showthread.php?t=947

Plugin Details

Severity: Medium

ID: 2686

Family: CGI

Published: 3/9/2005

Updated: 3/6/2019

Nessus ID: 11806, 19505

Risk Information

VPR

Risk Factor: Medium

Score: 6.6

CVSS v2

Risk Factor: Medium

Base Score: 5.8

Temporal Score: 5.2

Vector: CVSS2#AV:A/AC:L/Au:N/C:P/I:P/A:P

CVSS v3

Risk Factor: Medium

Base Score: 6.3

Temporal Score: 6

Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:F/RL:W/RC:X

Vulnerability Information

CPE: cpe:/a:php_arena:pafiledb

Reference Information

CVE: CVE-2004-1219, CVE-2004-1551, CVE-2004-1975, CVE-2005-0326, CVE-2005-0327, CVE-2005-0723, CVE-2005-0724, CVE-2005-0781, CVE-2005-0782, CVE-2005-2723, CVE-2006-2361

BID: 10229, 11817, 11818, 7183, 8271, 12788, 17930, 14654, 12952, 13967, 12758