Security Advisory
CVE-2007-3808
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrary SQL commands via the categories[] parameter in a search action to index.php, a different vector than CVE-2005-2000.