58 matches found
HLStats <=1.34 (hlstats.php) Remote SQL Injection Exploit
No description provided by source. brb ?php / Live Exploit Code SQL Inection + Path Disclosure Affects HLStats HLStats =1.34 and Hlstats = 1.20 works with magicquotesgpc=On by Michael Brooks / print "titleHLStats SQL Injection Exploit/title body bgcolor='009900' font color='FF0000'...
HLStats 1.34 - hlstats.php SQL Injection
HLStats 1.34 - hlstats.php SQL Injection = 1.20 works with magicquotesgpc=On by Michael Brooks / print "HLStats SQL Injection Exploit -------------------------------------------------------------------------------------------------------------------------------------------- Welcome To HLstats...
HLStats 1.34 - 'hlstats.php' SQL Injection
= 1.20 works with magicquotesgpc=On by Michael Brooks / print "HLStats SQL Injection Exploit -------------------------------------------------------------------------------------------------------------------------------------------- Welcome To HLstats Exploit code. SQL Inection + Path Disclosure...
HLStats <=1.34 (hlstats.php) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================= HLStats = 1.20 works with magicquotesgpc=On by Michael Brooks / print "HLStats SQL Injection Exploit...
CVE-2006-4543
Cross-site scripting XSS vulnerability in index.php in HLStats 1.34 allows remote attackers to inject arbitrary web script or HTML via the 1 game parameter in players mode, the 2 weapon parameter in weaponinfo mode, the 3 st parameter in search mode, the 4 action parameter in actioninfo mode, and...
CVE-2006-4543
CVE-2006-4543 is an XSS vulnerability in HLStats 1.34 (index.php). The issue allows remote attackers to inject arbitrary script or HTML via specific parameters across multiple modes: (1) game in players mode, (2) weapon in weaponinfo mode, (3) st in search mode, (4) action in actioninfo mode, and...
CVE-2006-4543
Cross-site scripting XSS vulnerability in index.php in HLStats 1.34 allows remote attackers to inject arbitrary web script or HTML via the 1 game parameter in players mode, the 2 weapon parameter in weaponinfo mode, the 3 st parameter in search mode, the 4 action parameter in actioninfo mode, and...
XSS in HLstats 1.34
Hello, world ; Input passed to multiple parameters in index.php isn't properly sanitised before being returned to the user. This can be exploited to execute HTML and script code in a user's browser session in context of an affected site with limitation of ' and ". This may also affect prior...
CVE-2006-4454
Cross-site scripting XSS vulnerability in hlstats.php in HLstats 1.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2006-4454
Cross-site scripting XSS vulnerability in hlstats.php in HLstats 1.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter...
CVE-2006-4454
CVE-2006-4454 describes a cross-site scripting (XSS) vulnerability in hlstats.php of HLstats 1.34 . The issue allows remote attackers to inject arbitrary script/HTML through the q parameter. Connected sources corroborate an XSS risk in hlstats with no explicit exploitation details or widely confi...
HLstats 1.34 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/19771/info HLstats is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may help an attacker steal cookie-based authentication credentials and launch...
HLstats 1.34 - index.php Multiple Cross-Site Scripting Vulnerabilities
HLstats 1.34 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/19771/info HLstats is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may help...
[SA21635] HLstats "q" Cross-Site Scripting Vulnerability
TITLE: HLstats "q" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA21635 VERIFY ADVISORY: http://secunia.com/advisories/21635/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: HLstats 1.x http://secunia.com/product/11755/ DESCRIPTION: kefka has discovere...
HLstats 1.34 - 'hlstats.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/19745/info HLstats is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data. Exploiting this issue may help the attacker steal cookie-based authentication credentials and launch other...
hlstats -- multiple cross site scripting vulnerabilities
Kefka reports multiple cross site scripting vulnerabilities within hlstats. The vulnerabilities are caused due to improper checking of variables, allowing an attacker to perform cross site scripting...
hlstatsXSS.txt
Cross-site Scripting Vulnerability in HLStats 1.34 hlstats.php?mode=search&game=cstrike&st=player&q=%22%3CSCRIPT%3Ealert%28%22XSS%22%29%3B%3C%2FSCRIPT%3E%22 Search module fails to sanitize quotes. kefka [email protected] Thanks to RSnake...
HLstats 1.34 - hlstats.php Cross-Site Scripting
HLstats 1.34 - hlstats.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19745/info HLstats is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data. Exploiting this issue may help the attacker steal cookie-based...