383 matches found
CVE-2010-2933
SQL injection vulnerability in AV Scripts AV Arcade 3 allows remote attackers to execute arbitrary SQL commands via the avacode cookie to the "main page," related to index.php and the login task...
CVE-2010-2933
The CVE-2010-2933 entry describes an SQL injection in AV Arcade 3 (AV Scripts) that can be triggered through the ava_code cookie sent to the main page (index.php, login task). Affected component: web application logic handling the ava_code cookie. Root cause: improper handling/validation of the c...
AV Arcade 3 - Cookie Authentication Bypass
AV Arcade 3 - Cookie Authentication Bypass :----------------------------------------------------------------------------: : Software : AV Arcade v3 PHP : : Site : www.avscripts.net : : Date : 28/07/2010 : : Author : saudi0hacker : : Type : Auth Bypass / Cookie : : Greetz to : pr.al7rbi : so busy ...
AV Arcade 3 Insecure Cookie / SQL Injection
:----------------------------------------------------------------------------: : Software : AV Arcade v3 PHP : : Site : www.avscripts.net : : Date : 28/07/2010 : : Author : saudi0hacker : : Type : Auth Bypass / Cookie : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com :...
AV Arcade 3 - Cookie Authentication Bypass
:----------------------------------------------------------------------------: : Software : AV Arcade v3 PHP : : Site : www.avscripts.net : : Date : 28/07/2010 : : Author : saudi0hacker : : Type : Auth Bypass / Cookie : : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com :...
PHP Quick Arcade <= 3.0.21 Multiple Vulnerabilities
PHP Quick Arcade is prone to SQL injection SQLi and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
PHP Quick Arcade (PHPQA) Version Detection
This script finds the running PHP Quick Arcade version. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PHP Quick Arcade SQL Injection and Cross Site Scripting Vulnerabilities
This host is running PHP Quick Arcade and is prone to SQL injection and cross site scripting Vulnerabilities. OpenVAS Vulnerability Test $Id: gbphpquickarcadesqlinjectionnxssvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ PHP Quick Arcade SQL Injection and Cross Site Scripting Vulnerabilities Author...
AV Arcade Search Field XSS/HTML Injection Vulnerability
Exploit for php platform in category web applications ======================================================= AV Arcade Search Field XSS/HTML Injection Vulnerability ======================================================= Exploit Title: AV Arcade Search Field /includes/misc/search.php XSS/HTML...
AV Arcade - Search Cross-Site Scripting HTML Injection
AV Arcade - Search Cross-Site Scripting HTML Injection Exploit Title: AV Arcade Search Field XSS/HTML Injection Date: 6/5/2010 Author: Vadim Toptunov, http://www.twitter.com/pentesting Software Link: http://www.avscripts.net/avarcade/ Version: 5.1.4 Free and Pro latest and prior Tested on: Any NI...
AV Arcade - 'Search' Cross-Site Scripting / HTML Injection
Exploit Title: AV Arcade Search Field XSS/HTML Injection Date: 6/5/2010 Author: Vadim Toptunov, http://www.twitter.com/pentesting Software Link: http://www.avscripts.net/avarcade/ Version: 5.1.4 Free and Pro latest and prior Tested on: Any NIX CVE : N/a Code : below Description: AV arcade is a fr...
CVE-2010-1714
Directory traversal vulnerability in the Arcade Games comarcadegames component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...
Directory traversal
Directory traversal vulnerability in the Arcade Games comarcadegames component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...
CVE-2010-1714
CVE-2010-1714 corresponds to a Local File Inclusion in the Joomla! Arcade Games component (com_arcadegames) 1.0. The Nuclei template confirms a directory traversal vulnerability allowing remote attackers to read arbitrary files by supplying .. in the controller parameter to index.php. Affected pr...
CVE-2010-1714
Directory traversal vulnerability in the Arcade Games comarcadegames component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php...
CVE-2010-1661
Multiple SQL injection vulnerabilities in PHP-Quick-Arcade PHPQA 3.0.21 allow remote attackers to execute arbitrary SQL commands via the 1 phpqauserc parameter to Arcade.php and the 2 id parameter to acpmoderate.php...
CVE-2010-1662
Cross-site scripting XSS vulnerability in acpmoderate.php in PHP-Quick-Arcade PHPQA 3.0.21 allows remote attackers to inject arbitrary web script or HTML via the serv parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in acpmoderate.php in PHP-Quick-Arcade PHPQA 3.0.21 allows remote attackers to inject arbitrary web script or HTML via the serv parameter...