CVE-2005-1999: PHP Arena Pafiledb

Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in pafiledb.php in paFileDB 3.1 allow remote attackers to inject arbitrary web script or HTML via the (1) sortby or (2) filelist parameters to the category action (category.php), or (3) pages parameter in the viewall action (viewall.php).

Affected products

• PHP Arena Pafiledb: version 3.1 only

Published 2005-06-15. Last modified 2026-06-16.