SQL injection vulnerability in (1) viewall.php and (2) category.php in paFileDB 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the start parameter to pafiledb.php.
https://exchange.xforce.ibmcloud.com/vulnerabilities/19688
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-0782