CVE-2008-1163

What is affected : phpArcadeScript, versions 1.0 through 3.0 RC2 (index.php). Vulnerability : SQL injection via the userid parameter in a profile action. Impact : allows remote attackers to execute arbitrary SQL commands (per the vendor/persona description). Exploitation : public exploit referenc...