Free Arcade Script 1.0 SQL Injection / Shell Upload

.--------------------------------------------------------------------------. | Web Application : Free Arcade Script 1.0 | | Homepage : http://www.freearcadescript.net | |--------------------------------------------------------------------------| | Vulnerability : SQL Injection + Remote PHP file...

CVE-2009-0731

Directory traversal vulnerability in pages/play.php in Free Arcade Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the template parameter...

CVE-2009-0731

CVE-2009-0731 is a directory traversal vulnerability affecting Free Arcade Script 1.0. The issue lies in pages/play.php where the template parameter can be exploited with a .. (dot dot) path to include and execute local files. Exploitation details and the affected software are explicitly document...