CVE-2005-4329

PHP Arena paFileDB Extreme Edition <RC 5 - SQL Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-4329. PoCs published by r0t3d3Vil.

AI-analyzed exploit summary The provided text describes an SQL injection vulnerability in PAFileDB Extreme Edition, where the 'newsid' parameter in the URL is not properly sanitized. This allows attackers to inject malicious SQL queries, potentially leading to data disclosure or modification.

Description

SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) newsid and (2) id parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by r0t3d3Vil · textwebappsphp
https://www.exploit-db.com/exploits/26857

The provided text describes an SQL injection vulnerability in PAFileDB Extreme Edition, where the 'newsid' parameter in the URL is not properly sanitized. This allows attackers to inject malicious SQL queries, potentially leading to data disclosure or modification.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Theoretical
Target: PAFileDB Extreme Edition
No auth needed
Prerequisites: Access to the vulnerable application URL
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/268
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2961
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/15912
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/21822

Scores

EPSS 0.0116
EPSS Percentile 62.8%

Details

Status published
Products (5)
php_arena/pafiledb extreme_rc_1
php_arena/pafiledb extreme_rc_2
php_arena/pafiledb extreme_rc_3
php_arena/pafiledb extreme_rc_4
php_arena/pafiledb extreme_rc_5
Published Dec 17, 2005
Tracked Since Feb 18, 2026