Sql injection

SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL commands via the id parameter in a browse action, a different vector than CVE-2008-5629...

CVE-2009-3973

SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL commands via the id parameter in a browse action, a different vector than CVE-2008-5629...

Authentication flaw

Arcade Trade Script 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLoggedIn cookie to true...

CVE-2009-3966

Arcade Trade Script 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLoggedIn cookie to true...

CVE-2009-3966

Arcade Trade Script 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the adminLoggedIn cookie to true...

CVE-2009-3973

The CVE relates to a SQL injection in index.php of Turnkey Arcade Script. The vulnerability is triggered via the id parameter in actions (play or browse) and allows remote attackers to execute arbitrary SQL commands, reflecting a classic server-side injectable vector. The connected data confirms ...

CVE-2009-3973

SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL commands via the id parameter in a browse action, a different vector than CVE-2008-5629...

CVE-2009-3966

CVE-2009-3966 affects Arcade Trade Script 1.0. The issue allows remote attackers to bypass authentication and gain administrative access by setting the adminLoggedIn cookie to true, enabling privilege elevation. Root cause is a cookie-based auth bypass in the login/auth flow; there is no document...

CVE-2009-3187

Cross-site scripting XSS vulnerability in gamelist.php in Stand Alone Arcade 1.1 allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2009-3187

Cross-site scripting XSS vulnerability in gamelist.php in Stand Alone Arcade 1.1 allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2009-3187

CVE-2009-3187 is an XSS in Stand Alone Arcade 1.1. The vulnerability is in gamelist.php and can be exploited via the cat parameter to inject arbitrary script/HTML. Exploitation details are not provided in the connected documents; CVSS v2 base score is 4.3 (MEDIUM), with network access, no confide...

Free Arcade Script 1.0 - search Cross-Site Scripting

Free Arcade Script 1.0 - search Cross-Site Scripting source: https://www.securityfocus.com/bid/43382/info Free Arcade Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary scri...

Free Arcade Script 1.0 - 'search' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43382/info Free Arcade Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Stand Alone Arcade 1.1 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Stand Alone Arcade 1.1 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://standalonearcade.com/ Greetings : Mizoz,...

Turnkey Arcade Script SQL Injection

============================================================================== Hackteach.OrG / / / || |/ | / | | / | / / / | / / | / / / / | / | | / / / /| | / /\ // ============================================================================== » Note : Hacker R0x Lamerz Sux !...

Turnkey Arcade Script - SQL Injection (2)

============================================================================== Hackteach.OrG / / / || |/ | / | | / | / / / | / / | / / / / | / | | / / / /| | / /\ // ============================================================================== » Note : Hacker R0x Lamerz Sux !...

Turnkey Arcade Script - SQL Injection (2)

Turnkey Arcade Script - SQL Injection 2 ============================================================================== Hackteach.OrG / / / || |/ | / | | / | / / / | / / | / / / / | / | | / / / /| | / /\ // ============================================================================== » Note :...

Arcade Trade Script 1.0b - (Authentication Bypass) Insecure Cookie Handling

====================================================================== » Script : Arcade Trade Script v.1.0 Insecure Cookie Handling Vuln » Language : php » Script site : http://www.arcadetradescript.com » Founder: Mr.tro0oqy borken heart : » E-mail : [email protected]...

Arcade Trade Script 1.0b (Auth Bypass) Insecure Cookie Handling Vuln

No description provided by source. ====================================================================== » Script : Arcade Trade Script v.1.0 Insecure Cookie Handling Vuln » Language : php » Script site : http://www.arcadetradescript.com » Founder: Mr.tro0oqy - from Yemen » Gr44tz to: H-...

Arcade Trade Script 1.0b (Auth Bypass) Insecure Cookie Handling Vuln

Exploit for unknown platform in category web applications ==================================================================== Arcade Trade Script 1.0b Auth Bypass Insecure Cookie Handling Vuln ====================================================================...