Vulnerabilities > PHP Arena > Pafiledb > 3.6

DATE	CVE	VULNERABILITY TITLE	RISK
2007-07-17	CVE-2007-3808	SQL Injection vulnerability in PHP Arena Pafiledb 3.6 SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrary SQL commands via the categories[] parameter in a search action to index.php, a different vector than CVE-2005-2000. network low complexity php-arena	7.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.