70 matches found
CVE-2008-4521
The CVE-2008-4521 issue affects the World of Warcraft tracker Infusion module (raidtracker_panel) for PHP-Fusion, with a vulnerability in the thisraidprogress.php script. The underlying flaw is SQL injection triggered by the INFO_RAID_ID parameter, enabling remote attackers to manipulate the data...
CVE-2008-4521
SQL injection vulnerability in thisraidprogress.php in the World of Warcraft tracker infusion raidtrackerpanel module 2.0 for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the INFORAIDID parameter...
Unfixed XSS vulnerability at www.wowgoldvip.com
Security researcher mckt, has submitted on 16/08/2008 a cross-site-scripting XSS vulnerability affecting www.wowgoldvip.com, which at the time of submission ranked 133425 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/09/2008. It is current...
Unfixed XSS vulnerability at worldofwarcraft.d2event.net
Security researcher Fugitif, has submitted on 24/11/2007 a cross-site-scripting XSS vulnerability affecting worldofwarcraft.d2event.net, which at the time of submission ranked 146662 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. I...
The United States Blizzard[World Of Warcraft] official program vulnerability-vulnerability warning-the black bar safety net
Battle.net clan management system using a MySQL backend, allowing users to easily upgrade and maintain the web site. System to achieve on exist input validation vulnerability, a remote attacker could use this vulnerability to executeSQL injectionattacks, unauthorized access to system administrati...
EQdkp <= 1.3.1 (Referer Spoof) Remote Database Backup Vulnerability
No description provided by source. Title: EQdkp = 1.3.1 Referer Spoof to access to SQL Database URL: http://www.eqdkp.com Hook: "Powered by EQdkp" Author: Eight10 Contact: [email protected] --------------------------------------------------------------------------------------------------------...
CVE-2006-3997
PHP remote file inclusion vulnerability in hsList.php in WoWRoster aka World of Warcraft Roster 1.5.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter...
CVE-2006-3997
WoWRoster (World of Warcraft Roster) before 1.5.x is affected by a PHP remote file inclusion in hsList.php, exploitable via the subdir parameter to execute arbitrary PHP code on the affected server. This vulnerability arises in WoWRoster’s handling of user-supplied URLs and could allow remote cod...
CVE-2006-3997
PHP remote file inclusion vulnerability in hsList.php in WoWRoster aka World of Warcraft Roster 1.5.x and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter...
WoW Roster 1.70 - libphpBB.php Remote File Inclusion
WoW Roster 1.70 - libphpBB.php Remote File Inclusion -------------------------------------------------------------------------------- Title : WoW Roster /lib/phpbb.php Remote File Include Vulnerability -------------------------------------------------------------------------------- Affected...
WoW Roster <= 1.70 (/lib/phpbb.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ===================================================================== WoW Roster = 1.70 /lib/phpbb.php Remote File Include Vulnerability =====================================================================...
WoW Roster <= 1.70 (/lib/phpbb.php) Remote File Include Vulnerability
No description provided by source. -------------------------------------------------------------------------------- Title : WoW Roster /lib/phpbb.php Remote File Include Vulnerability -------------------------------------------------------------------------------- Affected software description :...
WoW Roster 1.70 - '/lib/phpBB.php' Remote File Inclusion
-------------------------------------------------------------------------------- Title : WoW Roster /lib/phpbb.php Remote File Include Vulnerability -------------------------------------------------------------------------------- Affected software description : Application : World of Warcraft WoW...
WoW Roster 1.5.1 - subdir Remote File Inclusion
WoW Roster 1.5.1 - subdir Remote File Inclusion -------------------------------------------------------------------------------- Title : WoW Roster = 1.5.1 Remote File Include Vulnerabilities Discovered By Skulmatic -----------------------------------------------------------------------------...
WoW Roster 1.5.1 - 'subdir' Remote File Inclusion
-------------------------------------------------------------------------------- Title : WoW Roster = 1.5.1 Remote File Include Vulnerabilities Discovered By Skulmatic ----------------------------------------------------------------------------- Affected software description : Application : World...
WoW Roster <= 1.5.1 (subdir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================== WoW Roster = 1.5.1 subdir Remote File Include Vulnerability ==============================================================...
WoW Roster <= 1.5.1 (subdir) Remote File Include Vulnerability
No description provided by source. -------------------------------------------------------------------------------- Title : WoW Roster = 1.5.1 Remote File Include Vulnerabilities Discovered By Skulmatic ----------------------------------------------------------------------------- Affected softwar...
Secunia Research: phpRaid SQL Injection and File Inclusion Vulnerabilities
====================================================================== Secunia Research 29/06/2006 - phpRaid SQL Injection and File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...
Track"Warcraft Games"the Trojan of password transmission mode-bug warning-the black bar safety net
Review: If your system does not accidentally infected with a Trojan virus,and unfortunately the game account password or your QQ password has to be others to steal. Then,we identify the virus,if the virus is found in the"stallion"of the"contact information"? If you are lucky, not only can get bac...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Warcraft III Replay Parser for PHP 1.8c allows remote attackers to inject arbitrary web script or HTML via the page parameter. NOTE: post-disclosure analysis by CVE suggests that the "page" parameter is not used in this product, and "id" migh...