CVE-2009-3966

CVE-2009-3966 affects Arcade Trade Script 1.0. The issue allows remote attackers to bypass authentication and gain administrative access by setting the adminLoggedIn cookie to true, enabling privilege elevation. Root cause is a cookie-based auth bypass in the login/auth flow; there is no document...

CVE-2009-3973

SQL injection vulnerability in index.php in Turnkey Arcade Script allows remote attackers to execute arbitrary SQL commands via the id parameter in a browse action, a different vector than CVE-2008-5629...

CVE-2009-3187

Cross-site scripting XSS vulnerability in gamelist.php in Stand Alone Arcade 1.1 allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2009-3187

Cross-site scripting XSS vulnerability in gamelist.php in Stand Alone Arcade 1.1 allows remote attackers to inject arbitrary web script or HTML via the cat parameter...

CVE-2009-3187

CVE-2009-3187 is an XSS in Stand Alone Arcade 1.1. The vulnerability is in gamelist.php and can be exploited via the cat parameter to inject arbitrary script/HTML. Exploitation details are not provided in the connected documents; CVSS v2 base score is 4.3 (MEDIUM), with network access, no confide...

Free Arcade Script 1.0 - search Cross-Site Scripting

Free Arcade Script 1.0 - search Cross-Site Scripting source: https://www.securityfocus.com/bid/43382/info Free Arcade Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary scri...

Free Arcade Script 1.0 - 'search' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43382/info Free Arcade Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Stand Alone Arcade 1.1 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || Stand Alone Arcade 1.1 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://standalonearcade.com/ Greetings : Mizoz,...

Turnkey Arcade Script SQL Injection

============================================================================== Hackteach.OrG / / / || |/ | / | | / | / / / | / / | / / / / | / | | / / / /| | / /\ // ============================================================================== » Note : Hacker R0x Lamerz Sux !...

Turnkey Arcade Script - SQL Injection (2)

============================================================================== Hackteach.OrG / / / || |/ | / | | / | / / / | / / | / / / / | / | | / / / /| | / /\ // ============================================================================== » Note : Hacker R0x Lamerz Sux !...

Turnkey Arcade Script - SQL Injection (2)

Turnkey Arcade Script - SQL Injection 2 ============================================================================== Hackteach.OrG / / / || |/ | / | | / | / / / | / / | / / / / | / | | / / / /| | / /\ // ============================================================================== » Note :...

Arcade Trade Script 1.0b (Auth Bypass) Insecure Cookie Handling Vuln

No description provided by source. ====================================================================== » Script : Arcade Trade Script v.1.0 Insecure Cookie Handling Vuln » Language : php » Script site : http://www.arcadetradescript.com » Founder: Mr.tro0oqy - from Yemen » Gr44tz to: H-...

Arcade Trade Script 1.0b - (Authentication Bypass) Insecure Cookie Handling

====================================================================== » Script : Arcade Trade Script v.1.0 Insecure Cookie Handling Vuln » Language : php » Script site : http://www.arcadetradescript.com » Founder: Mr.tro0oqy borken heart : » E-mail : [email protected]...

Arcade Trade Script 1.0b (Auth Bypass) Insecure Cookie Handling Vuln

Exploit for unknown platform in category web applications ==================================================================== Arcade Trade Script 1.0b Auth Bypass Insecure Cookie Handling Vuln ====================================================================...

CVE-2009-2771

Cross-site scripting XSS vulnerability in Free Arcade Script 1.3 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to the default URI under search/...

Cross site scripting

Cross-site scripting XSS vulnerability in Free Arcade Script 1.3 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to the default URI under search/...

CVE-2009-2771

Cross-site scripting XSS vulnerability in Free Arcade Script 1.3 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to the default URI under search/...

CVE-2009-2771

The CVE-2009-2771 entry concerns Free Arcade Script 1.3 with a Cross-site Scripting (XSS) vulnerability. The issue arises in the search/ default URI when the keyword parameter is used, allowing remote attackers to inject arbitrary web script or HTML. Public references across multiple sources (NVD...

PHP Arcade Script 4.0 SQL Injection

---------------------------------------------------------------------------------------------------- Name : PHP AS v4 Site : http://www.phparcadescript.com/ ---------------------------------------------------------------------------------------------------- Found By : MizoZ EvilWay Team Made in :...

Free Arcade Script Cross Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Free Arcade Script search XSS vulnerability + Software : Free Arcade Script + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi, Neocoderz,...