World of Phaos SQL injection and Cross-Site Scripting

World of Phaos SQL injection and Cross-Site Scripting

Release date:
Updated on:

Affected Systems:
Worldofphaos
Description:
--------------------------------------------------------------------------------
Bugtraq id: 56347

World of phaos is a browser-based RPG Game written in PHP.

World of Phaos 0.9.82-UPDATED-5 and other versions have security vulnerabilities that allow attackers to steal Cookie authentication creden。, control applications, access or modify data.

<* Source: Kelvin Tan
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Worldofphaos
------------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://worldofphaos.com/