Cross site scripting

Cross-site scripting XSS vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to inject arbitrary web script or HTML via the letters parameter...

CVE-2009-2889

The vulnerability CVE-2009-2889 is a cross-site scripting (XSS) issue in index.php of PHP Scripts Now Hangman, exploitable via the letters parameter to inject arbitrary script/HTML. The CVSSv2 base score is 4.3 (Medium) with network attack vector and no confidentiality or availability impact; int...

CVE-2009-2888

SQL injection vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to execute arbitrary SQL commands via the n parameter...

CVE-2009-2888

The CVE-2009-2888 entry describes an SQL injection in index.php of PHP Scripts Now Hangman, exploitable via the n parameter to remotely execute arbitrary SQL commands. Affected component is the index.php handler for Hangman, with the underlying issue being user-supplied input in n that is not pro...

CVE-2009-2889

Cross-site scripting XSS vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to inject arbitrary web script or HTML via the letters parameter...

PHP Scripts Now Hangman - 'index.php?letters' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43513/info TOPHangman is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to compromise the application, access or modify data,...

PHP Scripts Now Hangman - index.php?n SQL Injection

PHP Scripts Now Hangman - index.php?n SQL Injection source: https://www.securityfocus.com/bid/43513/info TOPHangman is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues t...

PHP Scripts Now Hangman - index.php?letters Cross-Site Scripting

PHP Scripts Now Hangman - index.php?letters Cross-Site Scripting source: https://www.securityfocus.com/bid/43513/info TOPHangman is prone to an SQL-injection vulnerability and an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage...

[SECURITY] Fedora 7 Update: kdeedu-3.5.8-2.fc7

Educational/Edutainment applications, including: blinken: Simon Says Game kalzium: Periodic Table of Elements kanagram: Letter Order Game kbruch: Exercise Fractions keduca: Tests and Exams kgeography: Geography Trainer khangman: Hangman Game kig: Interactive Geometry kiten: Japanese Reference/Stu...