48 matches found
CVE-2008-3711
SQL injection vulnerability in index.php in PHPArcadeScript PHP Arcade Script 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter in a browse action...
CVE-2008-3711
CVE-2008-3711 concerns PHPArcadeScript 4.0. An SQL injection vulnerability exists in index.php during the browse action, where the cat parameter can be exploited remotely to execute arbitrary SQL commands. This is documented across multiple sources (NVD/NVD entry, CVE listing). The connected docu...
CVE-2008-3711: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in PHPArcadeScript PHP Arcade Script 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter in a browse action...
phpArcadeScript v4 (cat) Remote SQL Injection Vulnerability
No description provided by source. || | | PHP Arcade Script v4.0 cat Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :...
phpArcadeScript v4 (cat) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications =========================================================== phpArcadeScript v4 cat Remote SQL Injection Vulnerability =========================================================== || | | PHP Arcade Script v4.0 cat Remote SQL Injection...
Sql injection
SQL injection vulnerability in index.php in phpArcadeScript 1.0 through 3.0 RC2 allows remote attackers to execute arbitrary SQL commands via the userid parameter in a profile action...
CVE-2008-1163
SQL injection vulnerability in index.php in phpArcadeScript 1.0 through 3.0 RC2 allows remote attackers to execute arbitrary SQL commands via the userid parameter in a profile action...
CVE-2008-1163
SQL injection vulnerability in index.php in phpArcadeScript 1.0 through 3.0 RC2 allows remote attackers to execute arbitrary SQL commands via the userid parameter in a profile action...
CVE-2008-1163
What is affected : phpArcadeScript, versions 1.0 through 3.0 RC2 (index.php). Vulnerability : SQL injection via the userid parameter in a profile action. Impact : allows remote attackers to execute arbitrary SQL commands (per the vendor/persona description). Exploitation : public exploit referenc...
CVE-2008-1163: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in phpArcadeScript 1.0 through 3.0 RC2 allows remote attackers to execute arbitrary SQL commands via the userid parameter in a profile action...
phparcadescript-sql.txt
phpArcadeScript all version Remote Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Script Site: http://www.phparcadescript.com/ Price:$30.00 Tested on: Versions:1.0,2.0,3.0 RC1 &RC2 Dorks:"Powered by phpArcadeScript v1.0" "Powered by phpArcadeScript v2.0" "Powered by phpArcadeScript v3.0RC1"...
phpArcadeScript <= 3.0RC2 (userid) SQL Injection Vulnerability
No description provided by source. phpArcadeScript all version Remote Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker &nb...
phpArcadeScript <= 3.0RC2 (userid) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================== phpArcadeScript = 3.0RC2 userid SQL Injection Vulnerability ============================================================== phpArcadeScript all version Remote Sql Injection...
phpArcadeScript 3.0RC2 - userid SQL Injection
phpArcadeScript 3.0RC2 - userid SQL Injection phpArcadeScript all version Remote Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Script Site: http://www.phparcadescript.com/ Price:$30.00 Tested on: Versions:1.0,2.0,3.0 RC1 &RC2 Dorks:"Powered by phpArcadeScript v1.0" "Powered by phpArcadeScri...
phpArcadeScript 3.0RC2 - 'userid' SQL Injection
phpArcadeScript all version Remote Sql Injection Exploit AUTHOR:SoSo H H Iraqi-Cracker Script Site: http://www.phparcadescript.com/ Price:$30.00 Tested on: Versions:1.0,2.0,3.0 RC1 &RC2 Dorks:"Powered by phpArcadeScript v1.0" "Powered by phpArcadeScript v2.0" "Powered by phpArcadeScript v3.0RC1"...
CVE-2006-1082
Multiple cross-site scripting XSS vulnerabilities in phpArcadeScript 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the gamename parameter in tellafriend.php, 2 the loginstatus parameter in loginbox.php, 3 the submissionstatus parameter in index.php, the 4...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in phpArcadeScript 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the gamename parameter in tellafriend.php, 2 the loginstatus parameter in loginbox.php, 3 the submissionstatus parameter in index.php, the 4...
CVE-2006-1082: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in phpArcadeScript 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the gamename parameter in tellafriend.php, 2 the loginstatus parameter in loginbox.php, 3 the submissionstatus parameter in index.php, the 4...
CVE-2006-1082
phpArcadeScript 2.0 and earlier are affected by multiple XSS vulnerabilities due to lack of input sanitization. The issues allow remote attackers to inject arbitrary script via parameters in tellafriend.php (gamename), loginbox.php (login_status), index.php (submissionstatus), browse.php (cell_ti...
CVE-2006-1082
Multiple cross-site scripting XSS vulnerabilities in phpArcadeScript 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the gamename parameter in tellafriend.php, 2 the loginstatus parameter in loginbox.php, 3 the submissionstatus parameter in index.php, the 4...