HLStats Remote SQL Injection Exploit

Hlstats is more than 5 years old. HLstats has been downloaded more than 270,000 from http://sf.net. Nothing more than absolutely benign XSS has been reported for this application, until NOW. Merry Christmass, --Michael Brooks Homepage: http://sourceforge.net/projects/hlstats/ -----BEGIN PGP SIGNE...

HLStats 1.34 - hlstats.php SQL Injection

HLStats 1.34 - hlstats.php SQL Injection = 1.20 works with magicquotesgpc=On by Michael Brooks / print "HLStats SQL Injection Exploit -------------------------------------------------------------------------------------------------------------------------------------------- Welcome To HLstats...

HLStats <=1.34 (hlstats.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= HLStats = 1.20 works with magicquotesgpc=On by Michael Brooks / print "HLStats SQL Injection Exploit...

HLStats 1.34 - &#039;hlstats.php&#039; SQL Injection

= 1.20 works with magicquotesgpc=On by Michael Brooks / print "HLStats SQL Injection Exploit -------------------------------------------------------------------------------------------------------------------------------------------- Welcome To HLstats Exploit code. SQL Inection + Path Disclosure...

CVE-2006-4543

Cross-site scripting XSS vulnerability in index.php in HLStats 1.34 allows remote attackers to inject arbitrary web script or HTML via the 1 game parameter in players mode, the 2 weapon parameter in weaponinfo mode, the 3 st parameter in search mode, the 4 action parameter in actioninfo mode, and...

CVE-2006-4543

Cross-site scripting XSS vulnerability in index.php in HLStats 1.34 allows remote attackers to inject arbitrary web script or HTML via the 1 game parameter in players mode, the 2 weapon parameter in weaponinfo mode, the 3 st parameter in search mode, the 4 action parameter in actioninfo mode, and...

CVE-2006-4543

CVE-2006-4543 is an XSS vulnerability in HLStats 1.34 (index.php). The issue allows remote attackers to inject arbitrary script or HTML via specific parameters across multiple modes: (1) game in players mode, (2) weapon in weaponinfo mode, (3) st in search mode, (4) action in actioninfo mode, and...

XSS in HLstats 1.34

Hello, world ; Input passed to multiple parameters in index.php isn't properly sanitised before being returned to the user. This can be exploited to execute HTML and script code in a user's browser session in context of an affected site with limitation of ' and ". This may also affect prior...

CVE-2006-4454

Cross-site scripting XSS vulnerability in hlstats.php in HLstats 1.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

CVE-2006-4454

CVE-2006-4454 describes a cross-site scripting (XSS) vulnerability in hlstats.php of HLstats 1.34 . The issue allows remote attackers to inject arbitrary script/HTML through the q parameter. Connected sources corroborate an XSS risk in hlstats with no explicit exploitation details or widely confi...

CVE-2006-4454

Cross-site scripting XSS vulnerability in hlstats.php in HLstats 1.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter...

HLstats 1.34 - index.php Multiple Cross-Site Scripting Vulnerabilities

HLstats 1.34 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/19771/info HLstats is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may help...

HLstats 1.34 - &#039;index.php&#039; Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/19771/info HLstats is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may help an attacker steal cookie-based authentication credentials and launch...

HLstats 1.34 - hlstats.php Cross-Site Scripting

HLstats 1.34 - hlstats.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19745/info HLstats is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data. Exploiting this issue may help the attacker steal cookie-based...

[SA21635] HLstats &quot;q&quot; Cross-Site Scripting Vulnerability

TITLE: HLstats "q" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA21635 VERIFY ADVISORY: http://secunia.com/advisories/21635/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: HLstats 1.x http://secunia.com/product/11755/ DESCRIPTION: kefka has discovere...

hlstats -- multiple cross site scripting vulnerabilities

Kefka reports multiple cross site scripting vulnerabilities within hlstats. The vulnerabilities are caused due to improper checking of variables, allowing an attacker to perform cross site scripting...

hlstatsXSS.txt

Cross-site Scripting Vulnerability in HLStats 1.34 hlstats.php?mode=search&game=cstrike&st=player&q=%22%3CSCRIPT%3Ealert%28%22XSS%22%29%3B%3C%2FSCRIPT%3E%22 Search module fails to sanitize quotes. kefka [email protected] Thanks to RSnake...

HLstats 1.34 - &#039;hlstats.php&#039; Cross-Site Scripting

source: https://www.securityfocus.com/bid/19745/info HLstats is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied data. Exploiting this issue may help the attacker steal cookie-based authentication credentials and launch other...