Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2006-1082

Overview

Vulnerability Score 4.3 4.3
CVE Id CVE-2006-1082
Last Modified 07 Mar 2011 09:32:00
Published 08 Mar 2006 07:02:00
Confidentiality Impact NONE NONE
Integrity Impact PARTIAL PARTIAL
Availability Impact NONE NONE
Access Vector NETWORK
Access Complexity MEDIUM
Authentication NONE

CVE-2006-1082

Summary

Multiple cross-site scripting (XSS) vulnerabilities in phpArcadeScript 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the gamename parameter in tellafriend.php, (2) the login_status parameter in loginbox.php, (3) the submissionstatus parameter in index.php, the (4) cell_title_background_color and (5) browse_cat_name parameters in browse.php, the (6) gamefile parameter in displaygame.php, and (7) possibly other parameters in unspecified PHP scripts.

Vulnerable Systems

Application

  • Phparcadescript 2.0


References

VUPEN - ADV-2006-0821

BID - 16957

BUGTRAQ - 20060304 phpArcadeScript XSS Injections

SECUNIA - 19124

SREASON - 533


Last Updated: 27 May 2016 10:41:54