CVE-2002-1931

2005-06-2804:00:00

mitre

www.cve.org

php

arena

pafiledb

cross-site scripting

remote attackers

javascript

search string

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

64.9%

JSON

Cross-site scripting (XSS) vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the search string.

References

online.securityfocus.com/archive/1/296387

www.iss.net/security_center/static/10451.php

www.phparena.net/downloads/pafiledb.php?action=license&id=1&file=16

www.securityfocus.com/bid/6021