High
CVSS 7.5
Overview
SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) newsid and (2) id parameter.
SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Editio...
SQL injection vulnerability in pafiledb.php in PHP Arena paFileDB Extreme Edition RC 5 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) newsid and (2) id parameter.
This vulnerability is rated 🟠 HIGH.
Recommended actions: