CVE-2009-2771

The CVE-2009-2771 entry concerns Free Arcade Script 1.3 with a Cross-site Scripting (XSS) vulnerability. The issue arises in the search/ default URI when the keyword parameter is used, allowing remote attackers to inject arbitrary web script or HTML. Public references across multiple sources (NVD...

CVE-2009-0731

CVE-2009-0731 is a directory traversal vulnerability affecting Free Arcade Script 1.0. The issue lies in pages/play.php where the template parameter can be exploited with a .. (dot dot) path to include and execute local files. Exploitation details and the affected software are explicitly document...