CVE-2009-3500

CVE-2009-3500 affects BPowerHouse BPGames 1.0. It describes multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the cat_id parameter to main.php and the game_id parameter to game.php, indicating improper input handling in these endpoints. The r...