Exploitation Summary
EIP tracks 1 public exploit for CVE-2005-2000. PoCs published by Alpha_Programmer.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in PHP Arena paFileDB 1.1.3 and older. It crafts a malicious HTTP request to update the admin password, allowing unauthorized access.
Description
Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary SQL commands via the formname parameter (1) in the login form, (2) in the team login form, or (3) to auth.php, (4) select, (5) id, or (6) query parameter to pafiledb.php, or (7) string parameter to search.php.
Exploits (1)
This exploit targets a SQL injection vulnerability in PHP Arena paFileDB 1.1.3 and older. It crafts a malicious HTTP request to update the admin password, allowing unauthorized access.