Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-3808. PoCs published by pUm.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in PAFileDB's search functionality. The PoC injects a UNION-based SQL query to extract usernames and passwords from the `pafiledb_users` table.
Description
SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrary SQL commands via the categories[] parameter in a search action to index.php, a different vector than CVE-2005-2000.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in PAFileDB's search functionality. The PoC injects a UNION-based SQL query to extract usernames and passwords from the `pafiledb_users` table.