CVE-2007-4922

CVE-2007-4922 describes an SQL injection in the jeuxflash 1.0 module for KwsPHP. The vulnerability is in play.php (remote authenticated users) allowing arbitrary SQL execution via the id parameter in a play ac action to index.php. The description notes third-party details were used. Connected rec...