32 matches found
CVE-2018-25422
MOGG web simulator Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through the id parameter. Attackers can send GET requests to play.php with crafted SQL payloads in the id parameter to extract...
CVE-2018-25422: Improper Neutralization of Special Elements used in an SQL Command
MOGG web simulator Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through the id parameter. Attackers can send GET requests to play.php with crafted SQL payloads in the id parameter to extract...
cristobalpazmino.com XSS vulnerability
Vulnerable URL: http://www.cristobalpazmino.com/play.php?son=COLIZOCO.mp3=1"...
hd.koomovie.com XSS vulnerability
Vulnerable URL: http://hd.koomovie.com/play.php?movie=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google...
PT-2014-6339
Name of the Vulnerable Software and Affected Versions FB Gorilla plugin for WordPress affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the game play.php file. Recommendations For the FB Gorill...
Eyeland Studio Inc. SQL Injection Vulnerability
No description provided by source. Title: Eyeland Studio Inc. SQL Injection Vulnerability Version: 2.0 Author: Mr.P3rfekT Software Site:http://www.eyeland.com/ Tested on Lunix CVE : N/A Home :www.realmadridsy.com & www.v4-team.com/cc Founded By Mr.P3rfekT Dork :Eyeland Studio Inc. All Rights...
CVE-2013-4953
SQL injection vulnerability in play.php in Top Games Script 1.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter...
CVE-2013-4953: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in play.php in Top Games Script 1.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter...
PT-2013-5301
Name of the Vulnerable Software and Affected Versions Top Games Script version 1.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the gid parameter in the play.php file. Recommendations For version 1.2, avoid using the gid parameter in the...
YT-Videos Script - id SQL Injection
YT-Videos Script - id SQL Injection source: https://www.securityfocus.com/bid/54859/info YT-Videos Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromi...
WWWThreads Cross Site Scripting
www.eVuln.com advisory: XSS vulnerability in WWWThreads php version Summary: http://evuln.com/vulns/155/summary.html Details: http://evuln.com/vulns/155/description.html -----------Summary----------- eVuln ID: EV0155 Software: n/a Vendor: WWWThreads Version: 2006.11.25 Critical Level: low Type:...
mktba 4.3 => (play.php) SQL Injection Vulnerability
Exploit for php platform in category web applications =================================================== mktba 4.3 = play.php SQL Injection Vulnerability =================================================== Title : mktba 4.3 play.php ? SQL Injection Vulnerability Version : 4.3 Author : MR.SoOoFe...
CVE-2009-0731: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in pages/play.php in Free Arcade Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the template parameter...
Sql injection
SQL injection vulnerability in play.php in PHPmotion 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the vid parameter...
CVE-2008-3118
SQL injection vulnerability in play.php in PHPmotion 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the vid parameter...
CVE-2008-3118
SQL injection vulnerability in play.php in PHPmotion 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the vid parameter...
CVE-2008-3118: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in play.php in PHPmotion 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the vid parameter...
PHPmotion 2.0 - 'update_profile.php' Arbitrary File Upload
= $limitsize 269. // Display file size error 270. // /////////////////////// 271. $show = 1; 272. $messagetype = $config"notificationsuccess";//the messsage displayed at the top coner 273. $errormessage = 'Your image is...