PHP Quick Arcade SQL Injection and Cross Site Scripting Vulnerabilities

This host is running PHP Quick Arcade and is prone to SQL injection and cross site scripting Vulnerabilities. OpenVAS Vulnerability Test $Id: gbphpquickarcadesqlinjectionnxssvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ PHP Quick Arcade SQL Injection and Cross Site Scripting Vulnerabilities Author...

CVE-2008-0770: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in arcade.php in ibProArcade 3.3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the gdisplayorder cookie parameter...

ibProArcade 2.5.9+ - 'Arcade.php' SQL Injection

source: https://www.securityfocus.com/bid/22575/info ibProArcade is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

CVE-2004-1430

SQL injection vulnerability CVE-2004-1430 affects IbProArcade’s show_stats module (Arcade.php) where the gameid parameter can be exploited to inject arbitrary SQL. This is remote and arises from input handling in the application’s PHP code. The available sources confirm the vulnerability and base...

CVE-2004-1430: Undefined Security Weakness

SQL injection vulnerability in the showstats module in Arcade.php in IbProArcade allows remote attackers to execute arbitrary SQL code via the gameid parameter...