CVE-2010-2933

The CVE-2010-2933 entry describes an SQL injection in AV Arcade 3 (AV Scripts) that can be triggered through the ava_code cookie sent to the main page (index.php, login task). Affected component: web application logic handling the ava_code cookie. Root cause: improper handling/validation of the c...

CVE-2007-3563

CVE-2007-3563 describes an SQL injection in AV Arcade 2.1b: the vulnerability is in includes/view_page.php, exploitable via the id parameter in a view_page action to index.php. The issue allows remote attackers to execute arbitrary SQL commands, per the sources in the CVE record. The connected do...