vendor:
PHP Quick Arcade
by:
ITSecTeam
9,3
CVSS
HIGH
SQL Injection, XSS, Register_Global
89
CWE
Product Name: PHP Quick Arcade
Affected Version From: 3.0.21
Affected Version To: 3.0.21
Patch Exists: YES
Related CWE: CVE-2008-4456
CPE: a:quickarcade:php_quick_arcade
Metasploit:
https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2009-1289/, https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2009-1461/, https://www.rapid7.com/db/vulnerabilities/linuxrpm-RHSA-2010-0110/, https://www.rapid7.com/db/vulnerabilities/gentoo-linux-cve-2008-4456/, https://www.rapid7.com/db/vulnerabilities/suse-cve-2008-4456/, https://www.rapid7.com/db/vulnerabilities/centos_linux-cve-2008-4456/, https://www.rapid7.com/db/vulnerabilities/apple-osx-mysql-cve-2008-4456/
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows, Linux, Mac
2008
PHP-Quick-Arcade 3.0.21 Multiple Vulnerabilites
PHP Quick Arcade 3.0.21 is vulnerable to multiple vulnerabilities such as SQL Injection, XSS and Register_Global. An attacker can exploit these vulnerabilities to gain access to the database, execute arbitrary code and steal sensitive information.
Mitigation:
Upgrade to the latest version of PHP Quick Arcade.
