CVE-2010-0377

SQL injection vulnerability in modules/arcade/index.php in PHP MySpace Gold Edition 8.0 and 8.10 allows remote attackers to execute arbitrary SQL commands via the gid parameter in a playgame action. NOTE: some of these details are obtained from third party information...

CVE-2010-0377

The CVE-2010-0377 entry documents an SQL injection vulnerability in PHPMySpace Gold Edition (versions 8.0 and 8.10) affecting the arcade module: modules/arcade/index.php. The gid parameter used in a play_game action is vulnerable, allowing remote attackers to execute arbitrary SQL commands. Multi...