Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
paFileDB 3.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) auth.php, (2) login.php, (3) category.php, (4) file.php, (5) team.php, (6) license.php, (7) custom.php, (8) admins.php, or (9) backupdb.php, which reveal the path in a PHP error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PAFileDB 多个SQL注入及跨站脚本执行漏洞
Vulnerability Description
paFileDB是一款文件管理脚本,允许版主管理站点下载文件数据库,还可以编辑和删除文件。 在paFileDB中存在多个SQL注入和跨站脚本漏洞,漏洞的起因是viewall.php和category.php脚本。利用这些漏洞可能允许破坏软件,劫持会话,或对基础数据库进行攻击。
CVSS Information
N/A
Vulnerability Type
N/A