Vulnerability in Php Arena Pafiledb

CVE-2005-2723

SQL injection vulnerability in auth.php in PaFileDB 3.1, when authmethod is set to cookies, allows remote attackers to execute arbitrary SQL commands via the username value in the pafiledbcookie cookie.

EPSS: 0.013 (68.5th percentile) — read the EPSS interpretation.

Affected products

Php_arena Pafiledb — versions 3.1
N/a — versions n/a

References

cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)