PHP Quick Arcade SQL Injection and Cross Site Scripting Vulnerabilities

This host is running PHP Quick Arcade and is prone to SQL injection and cross site scripting Vulnerabilities. OpenVAS Vulnerability Test $Id: gbphpquickarcadesqlinjectionnxssvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ PHP Quick Arcade SQL Injection and Cross Site Scripting Vulnerabilities Author...

CVE-2010-1662

PHP Quick Arcade (PHPQA) 3.0.21 contains a cross-site scripting (XSS) flaw in acpmoderate.php that can be triggered by the serv parameter, allowing a remote attacker to inject arbitrary script/HTML. The CVE entry CVE-2010-1662 documents this XSS vector, with no explicit remediation details provid...