Free Arcade Script SQL Injection and Arbitrary File Upload Vulnerabilities
BID:34212
Info
Free Arcade Script SQL Injection and Arbitrary File Upload Vulnerabilities
| Bugtraq ID: | 34212 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 23 2009 12:00AM |
| Updated: | Mar 24 2009 07:16PM |
| Credit: | Mr.Skonnie |
| Vulnerable: |
Free Arcade Script Free Arcade Script 1.0 |
| Not Vulnerable: | |
Discussion
Free Arcade Script SQL Injection and Arbitrary File Upload Vulnerabilities
Free Arcade Script is prone to an SQL-injection vulnerability and an arbitrary-file-upload vulnerability.
Exploiting these issues could allow an attacker to compromise the application, upload arbitrary files, execute arbitrary code, access or modify data, or exploit latent vulnerabilities in the underlying database.
Free Arcade Script 1.0 is vulnerable; other versions may also be affected.
Free Arcade Script is prone to an SQL-injection vulnerability and an arbitrary-file-upload vulnerability.
Exploiting these issues could allow an attacker to compromise the application, upload arbitrary files, execute arbitrary code, access or modify data, or exploit latent vulnerabilities in the underlying database.
Free Arcade Script 1.0 is vulnerable; other versions may also be affected.
Exploit / POC
Free Arcade Script SQL Injection and Arbitrary File Upload Vulnerabilities
Attackers can use a browser to exploit these issues.
Attackers can use a browser to exploit these issues.
Solution / Fix
Free Arcade Script SQL Injection and Arbitrary File Upload Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Free Arcade Script SQL Injection and Arbitrary File Upload Vulnerabilities
References:
References:
- Vendor Homepage (Free Arcade Script)