818 matches found
PHP Arena PAFileDB 3.1 - Multiple Cross-Site Scripting Vulnerabilities
PHP Arena PAFileDB 3.1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/12758/info Multiple remote cross-site scripting vulnerabilities affect PHP Arena PaFileDB. These issues are due to a failure of the application to properly sanitize user-supplied input...
CVE-2005-0485
CVE-2005-0485 affects paNews 2.0b4 (PHP Arena). The vulnerability is an XSS in the file comment.php via the showpost parameter, caused by insufficient input sanitization. Remote attackers can inject arbitrary HTML/script when a user visits a malicious link. The impact is described as standard cli...
CVE-2005-0485
Cross-site scripting XSS vulnerability in comment.php for paNews 2.0b4 for PHP Arena allows remote attackers to inject arbitrary HTML and web script via the showpost parameter...
CVE-2002-1929
Cross-site scripting XSS vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attackers to inject arbitrary web script or HTML via the query string in the 1 rate, 2 email, or 3 download actions...
CVE-2002-1931
Cross-site scripting XSS vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the search string...
XSS vulnerabilites in Pafiledb
INTRO Some of you may be familiar with Pafiledb provided by PHP arena. Well they just released a new version that fixed a problem with their counting of files. Along with that they said they fixed a possible security bug involving using Javascript as a search string. I checked it on my old versio...
PHP Arena PAFileDB 1.1.3/2.1.1/3.0 - 'Email To Friend' Cross-Site Scripting
source: https://www.securityfocus.com/bid/6018/info PHP Arena paFileDB is prone to cross-site scripting attacks. An attacker may construct a malicious link to the vulnerable script which contains arbitrary HTML and script code. If this link is visited by a web user, the attacker-supplied code wil...
CVE-2001-1289
CVE-2001-1289 affects Quake 3 Arena 1.29f/g. A remote attacker can cause a denial of service (crash) by sending a malformed connection/login packet that begins with 0xFF characters, crashing the Quake3 Arena daemon. OpenVAS/NASL details indicate the affected service port 27960 and describe the at...
CVE-2001-1289
Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service crash via a malformed connection packet that begins with several char-255 characters...
Quake 3 Arena Malformed Connection Packet DoS
It was possible to crash the Quake3 Arena daemon by sending a specially crafted login string. An attacker may use this attack to make this service crash continuously, preventing you from playing. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderso...
DoS против Quake 3 Arena
Некорректный запрос приводит к краху сервера...
ADV: Quake 3 Arena 1.29f/g Vulnerability
-------------------------------------- :: Q30wnerz Advisory v1.0 - PUBLIC :: written by ttol -------------------------------------- :: Quake 3 Arena 1.29f/g Vulnerability -------------------------------------- ----------- :: Summary ----------- There exists a very large hole in Quake 3 Arena,...
CVE-2001-1289
Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service crash via a malformed connection packet that begins with several char-255 characters...
id Software Quake 3 Arena Server 1.29 - Buffer Overflow
id Software Quake 3 Arena Server 1.29 - Buffer Overflow source: https://www.securityfocus.com/bid/3123/info Quake3 Arena Server is a software package designed to host multiple Quake 3 players over a network for interactive play. A vulnerability exists in this software that can allow a malicious...
CVE-2000-0303
Quake3 Arena is affected by CVE-2000-0303 due to a path traversal (dot dot) vulnerability that enables a malicious server operator to read or modify files on a client. The issue, described in the NVD entry, indicates a network-accessible vector with low attack complexity and no authentication req...
CVE-2000-0303
Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot .. attack...