Intrusion PreventionPAFileDB.Constants.PHP.Remote.File.Inclusion
Description
It indicates a possible exploit of a remote file inclusion vulnerability in pafiledb_constants.php in Download Manager (mxBB pafiledb) integration that may allow remote attackers to execute arbitrary PHP code via a URL in the module_root_path parameter.
Affected Products
PHP Arena paFileDB 2.0.1
PHP Arena paFileDB 1.1.3
mxBB mxBB Portal 2.8
mxBB mxBB Portal 2.7
Impact
System compromise.
Recommended Actions
Refer to the vendor's web site for suggested workaround.
http://www.phparena.net/pafiledb/
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 14338 |
| Created | Mar 14, 2007 |
| Updated | Nov 07, 2022 |
| Risk |
|
| CVE ID | CVE-2006-2361 |
| Exploit Prediction Score | 23.65% |
| Default Action | pass |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris, MacOS |
| Affected App | PHP_app |