CVE-2005-0781

paFileDB 3.1 - SQL Injection via Start Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2005-0781. PoCs published by [email protected].

AI-analyzed exploit summary The provided text describes SQL injection and XSS vulnerabilities in paFileDB, specifically in the 'viewall.php' and 'category.php' scripts. It includes a sample exploit URL demonstrating the SQL injection via the 'start' parameter.

Description

SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter to pafiledb.php.

Exploits (2)

exploitdb WRITEUP VERIFIED
by [email protected] · textwebappsphp
https://www.exploit-db.com/exploits/25213

The provided text describes SQL injection and XSS vulnerabilities in paFileDB, specifically in the 'viewall.php' and 'category.php' scripts. It includes a sample exploit URL demonstrating the SQL injection via the 'start' parameter.

Classification
Writeup 90%
Attack Type
Sqli | Xss
Complexity
Trivial
Reliability
Theoretical
Target: paFileDB (version not specified)
No auth needed
Prerequisites: Access to the vulnerable paFileDB installation
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →
exploitdb WRITEUP VERIFIED
by [email protected] · textwebappsphp
https://www.exploit-db.com/exploits/25214

The provided text describes SQL injection and XSS vulnerabilities in paFileDB, specifically in the 'viewall.php' and 'category.php' scripts. It includes a sample exploit URL for SQL injection via the 'category' action parameter.

Classification
Writeup 90%
Attack Type
Sqli | Xss
Complexity
Trivial
Reliability
Theoretical
Target: paFileDB (version not specified)
No auth needed
Prerequisites: Access to the target application URL
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/19688
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=111065796525043&w=2
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/12788

Scores

EPSS 0.0241
EPSS Percentile 82.5%

Details

Status published
Products (5)
php_arena/pafiledb 1.1.3
php_arena/pafiledb 2.1.1
php_arena/pafiledb 3.0
php_arena/pafiledb 3.0_beta_3.1
php_arena/pafiledb 3.1
Published May 02, 2005
Tracked Since Feb 18, 2026