Php Arena

Records32All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high11CVSS 7.0–8.9

Exploited now

Php Arena records in CISA KEV

No Php Arena vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pafiledb 21 records LOW Pafaq 5 records LOW Pabugs 2 records LOW Panews 2 records LOW Pabox 1 record LOW Pacheckbook 1 record LOW

Records

2 records in Panews · all components

TI-2005-00596 CVE-2005-0646 · GHSA-9q56-42gf-7ppp

SQL injection vulnerability in auth.php in paNews 2.0.4b allows remote attackers to…

LOW 35

SQL injection vulnerability in auth.php in paNews 2.0.4b allows remote attackers to execute arbitrary SQL via the mysql_prefix parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01141 Published 2005-03-04 No fix listed

TI-2005-00597 CVE-2005-0647 · GHSA-x2f6-g6w2-2r2p

admin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via…

LOW 30

admin_setup.php in paNews 2.0.4b allows remote attackers to inject arbitrary PHP code via the (1) $form[comments] or (2) $form[autoapprove] parameters, which are written to config.php.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0415 Published 2005-03-04 No fix listed

Open these records in search →

Critical	0
High	11
Medium	21
Low	0
No CVSS	0