74 matches found
Sql injection
SQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion raidtrackerpanel module 2.0 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the INFORAIDID parameter...
CVE-2008-4521
SQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion raidtrackerpanel module 2.0 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the INFORAIDID parameter...
CVE-2008-4521
The CVE-2008-4521 issue affects the World of Warcraft tracker Infusion module (raidtracker_panel) for PHP-Fusion, with a vulnerability in the thisraidprogress.php script. The underlying flaw is SQL injection triggered by the INFO_RAID_ID parameter, enabling remote attackers to manipulate the data...
CVE-2008-4521: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion raidtrackerpanel module 2.0 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the INFORAIDID parameter...
Unfixed XSS vulnerability at www.wowgoldvip.com
Security researcher mckt, has submitted on 16/08/2008 a cross-site-scripting XSS vulnerability affecting www.wowgoldvip.com, which at the time of submission ranked 133425 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/09/2008. It is current...
Unfixed XSS vulnerability at worldofwarcraft.d2event.net
Security researcher Fugitif, has submitted on 24/11/2007 a cross-site-scripting XSS vulnerability affecting worldofwarcraft.d2event.net, which at the time of submission ranked 146662 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. I...
The United States Blizzard[World Of Warcraft] official program vulnerability-vulnerability warning-the black bar safety net
Battle.net clan management system using a MySQL backend, allowing users to easily upgrade and maintain the web site. System to achieve on exist input validation vulnerability, a remote attacker could use this vulnerability to executeSQL injectionattacks, unauthorized access to system administrati...
EQdkp <= 1.3.1 (Referer Spoof) Remote Database Backup Vulnerability
No description provided by source. Title: EQdkp = 1.3.1 Referer Spoof to access to SQL Database URL: http://www.eqdkp.com Hook: "Powered by EQdkp" Author: Eight10 Contact: [email protected] --------------------------------------------------------------------------------------------------------...
CVE-2006-3997
PHP remote file inclusion vulnerability in hsList.php in WoWRoster aka World of Warcraft Roster 1.5.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter...
CVE-2006-3997
PHP remote file inclusion vulnerability in hsList.php in WoWRoster aka World of Warcraft Roster 1.5.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter...
CVE-2006-3997
WoWRoster (World of Warcraft Roster) before 1.5.x is affected by a PHP remote file inclusion in hsList.php, exploitable via the subdir parameter to execute arbitrary PHP code on the affected server. This vulnerability arises in WoWRoster’s handling of user-supplied URLs and could allow remote cod...
WoW Roster <= 1.70 (/lib/phpbb.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ===================================================================== WoW Roster = 1.70 /lib/phpbb.php Remote File Include Vulnerability =====================================================================...
WoW Roster <= 1.70 (/lib/phpbb.php) Remote File Include Vulnerability
No description provided by source. -------------------------------------------------------------------------------- Title : WoW Roster /lib/phpbb.php Remote File Include Vulnerability -------------------------------------------------------------------------------- Affected software description :...
WoW Roster 1.70 - libphpBB.php Remote File Inclusion
WoW Roster 1.70 - libphpBB.php Remote File Inclusion -------------------------------------------------------------------------------- Title : WoW Roster /lib/phpbb.php Remote File Include Vulnerability -------------------------------------------------------------------------------- Affected...
WoW Roster 1.70 - '/lib/phpBB.php' Remote File Inclusion
-------------------------------------------------------------------------------- Title : WoW Roster /lib/phpbb.php Remote File Include Vulnerability -------------------------------------------------------------------------------- Affected software description : Application : World of Warcraft WoW...
WoW Roster <= 1.5.1 (subdir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================== WoW Roster = 1.5.1 subdir Remote File Include Vulnerability ==============================================================...
WoW Roster <= 1.5.1 (subdir) Remote File Include Vulnerability
No description provided by source. -------------------------------------------------------------------------------- Title : WoW Roster = 1.5.1 Remote File Include Vulnerabilities Discovered By Skulmatic ----------------------------------------------------------------------------- Affected softwar...
WoW Roster 1.5.1 - subdir Remote File Inclusion
WoW Roster 1.5.1 - subdir Remote File Inclusion -------------------------------------------------------------------------------- Title : WoW Roster = 1.5.1 Remote File Include Vulnerabilities Discovered By Skulmatic -----------------------------------------------------------------------------...
WoW Roster 1.5.1 - 'subdir' Remote File Inclusion
-------------------------------------------------------------------------------- Title : WoW Roster = 1.5.1 Remote File Include Vulnerabilities Discovered By Skulmatic ----------------------------------------------------------------------------- Affected software description : Application : World...
Secunia Research: phpRaid SQL Injection and File Inclusion Vulnerabilities
====================================================================== Secunia Research 29/06/2006 - phpRaid SQL Injection and File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...