GCVE-110-CERTCC-2005-459565

Advisory Published

Vulnetix · Advisory published June 14, 2005

paFileDB works around the default "off" state for the "register_globals" security directive in PHP and then fails to initialize the "query" variable, which can be used to inject arbitrary SQL queries.

Download JSON Open in Console

Risk Scores

certcc-cam

impact12population1exploitation1widely_known18score_current0.945ease_of_exploitation20

References

paFileDB fails to properly sanitize "query" parameter in "pafiledb.php"

advisory

paFileDB fails to properly sanitize "query" parameter in "pafiledb.php"

url

paFileDB fails to properly sanitize "query" parameter in "pafiledb.php"

url

Browse GCVE Records

73,280 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON