Sql injection

Multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters to authenticate.php and the 3 ID parameter to pwn.php. NOTE: some of these details are obtained fr...

CVE-2010-4799: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Chipmunk Pwngame 1.0, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters to authenticate.php and the 3 ID parameter to pwn.php. NOTE: some of these details are obtained fr...

PT-2011-1747

Name of the Vulnerable Software and Affected Versions Chipmunk Pwngame version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is possible via the username and password parameters to "authenticate.php" and the ID parameter to "pwn.php" when magic quotes g...