Vulnerabilities

TI-2008-02745 CVE-2008-2871 · GHSA-2jhx-f223-wqrm

Multiple cross-site scripting (XSS) vulnerabilities in template2.php in PEGames allow…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in template2.php in PEGames allow remote attackers to inject arbitrary web script or HTML via the (1) sitetitle, (2) sitenav, (3) sitemain, and (4) sitealt parameters.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01196 Published 2008-06-26 No fix listed CWE-79

TI-2006-05977 CVE-2006-6213 · GHSA-557r-mpfm-f4j6

index.php in PEGames uses the extract function to overwrite critical variables, which…

LOW 38

index.php in PEGames uses the extract function to overwrite critical variables, which allows remote attackers to conduct PHP remote file inclusion attacks via the abs_url parameter, which is later extracted to overwrite…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02733 Published 2006-12-01 No fix listed

Vulnerabilities

Filters

Multiple cross-site scripting (XSS) vulnerabilities in template2.php in PEGames allow…

index.php in PEGames uses the extract function to overwrite critical variables, which…