SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrar…

Published 21 y ago 2005-03-20 · modified 4 mo ago 2026-06-16 · JSON

CVSS

7.5

v2.0 · NVD

CISA KEV

not known exploited

EPSS

2.4%

percentile 84%

Public exploits

Exploit-DB

SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter to pafiledb.php.

Exploit prediction (EPSS)

2.41% probability of exploitation in the next 30 days, higher than 84% of all scored CVEs.

Exploits and detections

EDB-25214 PAFileDB 1.1.3/2.1.1/3.0/3.1 - 'category.php?start' SQL Injection · webapps · 2005-03-12
EDB-25213 PAFileDB 1.1.3/2.1.1/3.0/3.1 - 'viewall.php?start' SQL Injection · webapps · 2005-03-12

CVSS scores

Assigned by	Version	Score	Vector
NVD	2.0	7.5	`AV:N/AC:L/Au:N/C:P/I:P/A:P`

References

exchange.xforce.ibmcloud.com /vulnerabilities/19688 · vdb-entry, x_refsource_XF, x_transferred
marc.info /?l=bugtraq&m=111065796525043&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
securityfocus.com /bid/12788 · vdb-entry, x_refsource_BID, x_transferred

Sources

CVE List: CVE-2005-0781
NVD: CVE-2005-0781

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.

Summary

Exploit prediction (EPSS)

Exploits and detections

CVSS scores

References

Sources