avarcade-sql.txt

Web: AV Arcade 2.1b Site : www.avscripts.net Dork : "Powered By AV Arcade" Author: Kw3rLn tehlostbyteatYaHoOd0tCom Romanian Security Team Ethical Hacking - hTTp://RSTZONE.nET Description: SQL injection in $id of includes/viewpage.php Exploit:...

CVE-2007-1978

SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewgamelist action...

CVE-2007-1978

SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewgamelist action...

CVE-2007-1978

CVE-2007-1978 : SQL injection in the Arcade 1.00 module for PHP-Fusion (index.php, view_game_list action) allows remote attackers to inject arbitrary SQL via the cid parameter. Root cause is unsanitized input leading to database query manipulation. Documents do not provide explicit patch version ...

CVE-2007-1978

SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewgamelist action...

PHP-FUSION Arcade Module (cid) Remote SQL Injection Vuln

-------------------------------- PHP-FUSION Arcade Module cid Remote SQL Injection Vuln -------------------------------- Bulan: xoron xoron.biz -------------------------------- Exploit: index.php?op=viewgamelist&cid=-1//union//select//null,username,userpassword,null,null,null//from//fusionusers/...

PHP-Fusion Module Arcade 1.0 (cid) Remote SQL Injection Vulnerability

No description provided by source. -------------------------------- PHP-FUSION Arcade Module cid Remote SQL Injection Vuln -------------------------------- Bulan: xoron xoron.biz -------------------------------- Exploit:...

PHP-Fusion Module Arcade 1.0 (cid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== PHP-Fusion Module Arcade 1.0 cid Remote SQL Injection Vulnerability ===================================================================== -------------------------------...

phpfusion-sql.txt

PHP-FUSION Arcade Module cid Remote SQL Injection Vuln -------------------------------- Bulan: xoron xoron.biz -------------------------------- Exploit: index.php?op=viewgamelist&cid=-1//union//select//null,username,userpassword,null,null,null//from//fusionusers/ --------------------------------...

PHP-Fusion Module Arcade 1.0 - 'cid' SQL Injection

-------------------------------- PHP-FUSION Arcade Module cid Remote SQL Injection Vuln -------------------------------- Bulan: xoron xoron.biz -------------------------------- Exploit: index.php?op=viewgamelist&cid=-1//union//select//null,username,userpassword,null,null,null//from//fusionusers/...

PHP-Fusion Module Arcade 1.0 - cid SQL Injection

PHP-Fusion Module Arcade 1.0 - cid SQL Injection -------------------------------- PHP-FUSION Arcade Module cid Remote SQL Injection Vuln -------------------------------- Bulan: xoron xoron.biz -------------------------------- Exploit:...

flashgame154-rfi.txt

-------------------------------------------------------- Author : JuMp-Er Date : feb, 21th 2007 Level : Dangerous contact: : aH-crewathotmaildotcom -------------------------------------------------------- Software description -------------------------------------------------------- App...

FlashGameScript v1.5.4 Remote File Inclusion Vulnerability

-------------------------------------------------------- Author : JuMp-Er Date : feb, 21th 2007 Level : Dangerous contact: : aH-crewathotmaildotcom -------------------------------------------------------- Software description -------------------------------------------------------- App...

CVE-2006-3106

Cross-site scripting XSS vulnerability in index.php in phpMyDesktop|Arcade 1.0 allows remote attackers to inject arbitrary web script or HTML via the subsite parameter in the subsite todo...

CVE-2006-3106

Cross-site scripting XSS vulnerability in index.php in phpMyDesktop|Arcade 1.0 allows remote attackers to inject arbitrary web script or HTML via the subsite parameter in the subsite todo...

CVE-2006-3106

CVE-2006-3106 describes a cross-site scripting (XSS) vulnerability in index.php of phpMyDesktop|Arcade 1.0 . The flaw is triggered by the subsite parameter in the subsite todo feature, enabling remote attackers to inject arbitrary web script or HTML. The public reports indicate an XSS risk with a...

CVE-2006-2747

CVE-2006-2747 affects PhpMyDesktop|arcade 1.0 FINAL. A directory-traversal in index.php via the showsubsite todo parameter (.. + trailing null %00) can read arbitrary files and may allow PHP code execution. Exploit details, affected versions, and remediation are not provided in the connected docu...

phpMyDesktop.txt

phpMyDesktop|arcade 1.0 FINAL Code Execution Exploit found-by: darkgod [email protected] links: criticalsecurity.NET, hackthissite.org, hacbloc.org video-@: http://dgod.dajoob.com/videos/phpmydesktoparcade.rar phpMyDesktop|arcade is a php-based 'bridge' between a game and message board. Its g...

phpMyDesktop|arcade 1.0 FINAL Code Execution

phpMyDesktop|arcade 1.0 FINAL Code Execution Exploit found-by: darkgod [email protected] links: criticalsecurity.NET, hackthissite.org, hacbloc.org video-@: http://dgod.dajoob.com/videos/phpmydesktoparcade.rar phpMyDesktop|arcade is a php-based 'bridge' between a game and message board. Its g...

PHPMyDesktop/Arcade 1.0 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/18185/info phpMyDesktop|arcade is prone to a local file-include vulnerability. This may allow unauthorized users to view files and to execute local scripts. An attacker may also be able to execute arbitrary code by way of uploaded images...