CVE-2005-2723

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

SQL injection vulnerability in auth.php in PaFileDB 3.1, when authmethod is set to cookies, allows remote attackers to execute arbitrary SQL commands via the username value in the pafiledbcookie cookie.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=112490781927680&w=2
http://secunia.com/advisories/16566/Vendor Advisory
http://www.security-project.org/projects/board/showthread.php?t=947Patch, Vendor Advisory
http://www.securityfocus.com/bid/14654Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/21988
http://marc.info/?l=bugtraq&m=112490781927680&w=2
http://secunia.com/advisories/16566/Vendor Advisory
http://www.security-project.org/projects/board/showthread.php?t=947Patch, Vendor Advisory
http://www.securityfocus.com/bid/14654Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/21988

Timeline

Published: Aug 30, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-27244.3Cross-site scripting (XSS) vulnerability in SqWebMail 5.0.4 allows remote attackers to inject arbitrary web script or HTML via a file attach CVE-2005-27252.1The inputtrap utility in QNX RTOS 6.1.0, 6.3, and possibly earlier versions does not properly check permissions when the -t flag is specifie CVE-2005-27265.0Directory traversal vulnerability in Home Ftp Server 1.0.7 allows remote authenticated users to read arbitrary files via "C:\" (Windows driv CVE-2005-27275.0Home Ftp Server 1.0.7 stores sensitive user information and server information in the same directory as the user's home directory, which all CVE-2005-27285.0The byte-range filter in Apache 2.0 before 2.0.54 allows remote attackers to cause a denial of service (memory consumption) via an HTTP head CVE-2005-27297.5The HTTP proxy in Astaro Security Linux 6.0 does not properly filter HTTP CONNECT requests to localhost, which allows remote attackers to by CVE-2005-27305.0The HTTP proxy in Astaro Security Linux 6.0 allows remote attackers to obtain sensitive information via an invalid request, which reveals a CVE-2005-27312.1Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote authenticated webmin users to read arbitrar CVE-2005-27325.0AWStats 6.4, and possibly earlier versions, allows remote attackers to obtain sensitive information via a file that does not exist in the co CVE-2005-27337.5upload_img_cgi.php in Simple PHP Blog (SPHPBlog) does not properly restrict file extensions of uploaded files, which could allow remote atta CVE-2005-27344.3Cross-site scripting (XSS) vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via CVE-2005-27354.3Cross-site scripting (XSS) vulnerability in phpGraphy 0.9.9a and earlier allows remote attackers to inject arbitrary web script or HTML via