{"api_version":"1","generated_at":"2026-05-10T11:05:15+00:00","cve":"CVE-2005-0782","urls":{"html":"https://cve.report/CVE-2005-0782","api":"https://cve.report/api/cve/CVE-2005-0782.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-0782","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-0782"},"summary":{"title":"CVE-2005-0782","description":"Cross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the start parameter to pafiledb.php.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-05-02 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://marc.info/?l=bugtraq&m=111221940107161&w=2","name":"http://marc.info/?l=bugtraq&m=111221940107161&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'PaFileDB Version 3.1 and below are exploitable via a XSS and a' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/12788","name":"http://www.securityfocus.com/bid/12788","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"PAFileDB Multiple SQL Injection And Cross-Site Scripting Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19690","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19690","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://digitalparadox.org/advisories/pafdb.txt","name":"http://digitalparadox.org/advisories/pafdb.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"","mime":"","httpstatus":"-1","archivestatus":"404"},{"url":"http://marc.info/?l=bugtraq&m=111065796525043&w=2","name":"http://marc.info/?l=bugtraq&m=111065796525043&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"'[SECURITYREASON.COM]  SQL injection and XSS in paFileDB' - MARC","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-0782","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-0782","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"782","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"php_arena","cpe5":"pafiledb","cpe6":"1.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"782","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"php_arena","cpe5":"pafiledb","cpe6":"2.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"782","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"php_arena","cpe5":"pafiledb","cpe6":"3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"782","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"php_arena","cpe5":"pafiledb","cpe6":"3.0_beta_3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"782","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"php_arena","cpe5":"pafiledb","cpe6":"3.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T21:28:28.945Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://digitalparadox.org/advisories/pafdb.txt"},{"name":"20050312 [SECURITYREASON.COM]  SQL injection and XSS in paFileDB","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=111065796525043&w=2"},{"name":"pafiledb-viewall-category-xss(19690)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19690"},{"name":"12788","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/12788"},{"name":"20050330 PaFileDB Version 3.1 and below are exploitable via a XSS and a SQL injection vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=111221940107161&w=2"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-03-12T00:00:00.000Z","descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the start parameter to pafiledb.php."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-07-10T14:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://digitalparadox.org/advisories/pafdb.txt"},{"name":"20050312 [SECURITYREASON.COM]  SQL injection and XSS in paFileDB","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=111065796525043&w=2"},{"name":"pafiledb-viewall-category-xss(19690)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19690"},{"name":"12788","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/12788"},{"name":"20050330 PaFileDB Version 3.1 and below are exploitable via a XSS and a SQL injection vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://marc.info/?l=bugtraq&m=111221940107161&w=2"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-0782","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Cross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the start parameter to pafiledb.php."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://digitalparadox.org/advisories/pafdb.txt","refsource":"MISC","url":"http://digitalparadox.org/advisories/pafdb.txt"},{"name":"20050312 [SECURITYREASON.COM]  SQL injection and XSS in paFileDB","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=111065796525043&w=2"},{"name":"pafiledb-viewall-category-xss(19690)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/19690"},{"name":"12788","refsource":"BID","url":"http://www.securityfocus.com/bid/12788"},{"name":"20050330 PaFileDB Version 3.1 and below are exploitable via a XSS and a SQL injection vulnerability","refsource":"BUGTRAQ","url":"http://marc.info/?l=bugtraq&m=111221940107161&w=2"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-0782","datePublished":"2005-03-20T05:00:00.000Z","dateReserved":"2005-03-20T00:00:00.000Z","dateUpdated":"2024-08-07T21:28:28.945Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-05-02 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:php_arena:pafiledb:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"12BADFC3-51C0-4881-B5DF-81BBA02F0EAD"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_arena:pafiledb:2.1.1:*:*:*:*:*:*:*","matchCriteriaId":"EF4CCDF7-5945-4478-9661-217F823DE9F0"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_arena:pafiledb:3.0:*:*:*:*:*:*:*","matchCriteriaId":"DFC5717A-E248-406F-A281-C5B2F5368127"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_arena:pafiledb:3.0_beta_3.1:*:*:*:*:*:*:*","matchCriteriaId":"2E807335-6C70-4A19-A692-A7DE325FC213"},{"vulnerable":true,"criteria":"cpe:2.3:a:php_arena:pafiledb:3.1:*:*:*:*:*:*:*","matchCriteriaId":"E6EB588E-FC2B-4E10-86F5-33C2758BEED5"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"782","Ordinal":"1","Title":"CVE-2005-0782","CVE":"CVE-2005-0782","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"782","Ordinal":"1","NoteData":"Cross-site scripting (XSS) vulnerability in (1) viewall.php and (2) category.php for paFileDB 3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the start parameter to pafiledb.php.","Type":"Description","Title":"CVE-2005-0782"},{"CveYear":"2005","CveId":"782","Ordinal":"2","NoteData":"2005-03-20","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"782","Ordinal":"3","NoteData":"2017-07-10","Type":"Other","Title":"Modified"}]}}}