CVE-2009-2289

CVE-2009-2289 is an XSS vulnerability in Arcade Trade Script 1.0 beta, impacting index.php where the q parameter in a gamelist action can be exploited to inject arbitrary script/HTML. The issue is documented in multiple sources (e.g., NVD entry) and arises from insufficient input sanitization in ...

CVE-2009-2289

Cross-site scripting XSS vulnerability in index.php in Arcade Trade Script 1.0 beta allows remote attackers to inject arbitrary web script or HTML via the q parameter in a gamelist action...

[SECURITY] Fedora 10 Update: maniadrive-1.2-13.fc10

ManiaDrive is an arcade car game on acrobatic tracks, with a quick and nerv ous gameplay tracks almost never exceed one minute. Features: Complex car physics, Challenging "story mode", LAN and Internet mode, Live scores, Track editor, Dedicated server with HTTP interface and More than 30 blocks...

Arcade Trade Script Cross Site Scripting

Original advisory: http://www.davidsopas.com/2009/05/25/arcade-trade-script-xss/ Arcade Trade Script is a full arcade site CMS Content Management System with easy customization and advanced traffic trading system built in. With ATS you will hardly ever have to FTP anything. Almost all files, page...

Intergo Arcade Trade Script 1.0 - q Cross-Site Scripting

Intergo Arcade Trade Script 1.0 - q Cross-Site Scripting source: https://www.securityfocus.com/bid/44555/info Arcade Trade Script is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

CVE-2009-1229

SQL injection vulnerability in Arcadwy Arcade Script allows remote attackers to execute arbitrary SQL commands via the user cookie parameter...

Sql injection

SQL injection vulnerability in Arcadwy Arcade Script allows remote attackers to execute arbitrary SQL commands via the user cookie parameter...

CVE-2009-1228

Cross-site scripting XSS vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject arbitrary web script or HTML via the username field username parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in register.php in Arcadwy Arcade Script CMS allows remote attackers to inject arbitrary web script or HTML via the username field username parameter...

CVE-2009-1229

CVE-2009-1229 affects Arcadwy Arcade Script with a SQL injection vulnerability exposed via the user cookie parameter, enabling remote attackers to execute arbitrary SQL commands. The provided sources confirm the vulnerable component and parameter but do not specify affected versions or mitigation...

CVE-2009-1229

SQL injection vulnerability in Arcadwy Arcade Script allows remote attackers to execute arbitrary SQL commands via the user cookie parameter...

CVE-2009-1228

CVE-2009-1228 is a documented cross-site scripting (XSS) vulnerability in the Arcadwy Arcade Script CMS, specifically in the register.php script where the username field (user_name parameter) can be injected with arbitrary web script or HTML by remote attackers. The NVD entry lists a CVSSv2 base ...

Arcadwy Arcade Script Authentication Bypass

Arcadwy Arcade Script for ByPass Insecure Cookie Handling Vulnerability ---------------------------------------------------------- Discovered By: ZoRLu Date: 29.03.2009 Home: yildirimordulari.com / experl.com / z0rlu.blogspot.com / woltaj.org contact: [email protected] N0T: BasImIz Sagolsun,...

Arcadwy Arcade Script (for ByPass) Insecure Cookie Handling Vulnerability

No description provided by source. Arcadwy Arcade Script for ByPass Insecure Cookie Handling Vulnerability ---------------------------------------------------------- Discovered By: ZoRLu Date: 29.03.2009 Home: yildirimordulari.com / experl.com / z0rlu.blogspot.com / woltaj.org contact:...

Arcadwy Arcade Script (Auth Bypass) Insecure Cookie Handling Vuln

No description provided by source. Arcadwy Arcade Script for ByPass Insecure Cookie Handling Vulnerability ---------------------------------------------------------- Discovered By: ZoRLu Date: 29.03.2009 Home: yildirimordulari.com / experl.com / z0rlu.blogspot.com / woltaj.org contact:...

Arcadwy Arcade Script (Auth Bypass) Insecure Cookie Handling Vuln

Exploit for unknown platform in category web applications ================================================================= Arcadwy Arcade Script Auth Bypass Insecure Cookie Handling Vuln ================================================================= Arcadwy Arcade Script for ByPass Insecure...

Arcadwy Arcade Script - (Authentication Bypass) Insecure Cookie Handling

Arcadwy Arcade Script - Authentication Bypass Insecure Cookie Handling Arcadwy Arcade Script for ByPass Insecure Cookie Handling Vulnerability ---------------------------------------------------------- Discovered By: ZoRLu Date: 29.03.2009 Home: yildirimordulari.com / experl.com /...

Arcadwy Arcade Script - (Authentication Bypass) Insecure Cookie Handling

Arcadwy Arcade Script for ByPass Insecure Cookie Handling Vulnerability ---------------------------------------------------------- Discovered By: ZoRLu Date: 29.03.2009 Home: yildirimordulari.com / experl.com / z0rlu.blogspot.com / woltaj.org contact: [email protected] N0T: BasImIz Sagolsun,...

Arcadwy Arcade Script (username) Static XSS Vulnerability

No description provided by source. \ Information Script : Arcadwy Arcade Script CMS Buy/Download : http://arcadwy.com/ Vulnerability : Static XSS Discovered by : Anarchy Angel Contact : anarchydotang31 @ gmail Website : http://hha.zapto.org Greets : Xteaphn, lun0s, BSDgurl, progenic. \/ ! EXPLOIT...

Arcadwy Arcade Script (username) Static XSS Vulnerability

Exploit for unknown platform in category web applications ========================================================= Arcadwy Arcade Script username Static XSS Vulnerability ========================================================= \ Information Script : Arcadwy Arcade Script CMS Buy/Download :...