what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

Arcade Trade Script Cross Site Scripting

Arcade Trade Script Cross Site Scripting
Posted May 26, 2009
Authored by SmOk3

Arcade Trade Script 1.0 Beta suffers from a cross site scripting vulnerability.

tags | exploit, xss
SHA-256 | 19b4337d08960f73a4bf409245d1fd319557c7019b489ab758417be1b07580c8

Arcade Trade Script Cross Site Scripting

Change Mirror Download
Original advisory: http://www.davidsopas.com/2009/05/25/arcade-trade-script-xss/

Arcade Trade Script is a full arcade site CMS (Content Management
System) with easy customization and advanced traffic trading system
built in. With ATS you will hardly ever have to FTP anything. Almost
all files, pages, and meta tags can be edited from the admin panel.
ATS is extremely easy to use and works for both regular arcades and
full blown traffic trading arcades. - taken from Arcade Trade Script
vendor website.

This awesome script (version 1.0 beta) has a XSS vulnerability in one
of it’s variables, this attack could be used to grab peoples cookies
or to launch denial of service attacks.

PoC:
index.php?a=gamelist&q=[XSS]&submit=GO

The vendor was really fast, about a couple of hours, to patch it after
I mailed him so just upgrade to a new version to have it fixed.
It’s always nice to see an admin who cares and answer positively to a
possible security threat.
Login or Register to add favorites

File Archive:

February 2023

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Feb 1st
    11 Files
  • 2
    Feb 2nd
    9 Files
  • 3
    Feb 3rd
    5 Files
  • 4
    Feb 4th
    0 Files
  • 5
    Feb 5th
    0 Files
  • 6
    Feb 6th
    0 Files
  • 7
    Feb 7th
    0 Files
  • 8
    Feb 8th
    0 Files
  • 9
    Feb 9th
    0 Files
  • 10
    Feb 10th
    0 Files
  • 11
    Feb 11th
    0 Files
  • 12
    Feb 12th
    0 Files
  • 13
    Feb 13th
    0 Files
  • 14
    Feb 14th
    0 Files
  • 15
    Feb 15th
    0 Files
  • 16
    Feb 16th
    0 Files
  • 17
    Feb 17th
    0 Files
  • 18
    Feb 18th
    0 Files
  • 19
    Feb 19th
    0 Files
  • 20
    Feb 20th
    0 Files
  • 21
    Feb 21st
    0 Files
  • 22
    Feb 22nd
    0 Files
  • 23
    Feb 23rd
    0 Files
  • 24
    Feb 24th
    0 Files
  • 25
    Feb 25th
    0 Files
  • 26
    Feb 26th
    0 Files
  • 27
    Feb 27th
    0 Files
  • 28
    Feb 28th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Hosting By
Rokasec
close