CVE-2010-4799

Chipmunk Pwngame 1.0 is affected by multiple SQL injection vulnerabilities (CVE-2010-4799). The flaws allow remote attackers to inject arbitrary SQL via three input vectors when magic_quotes_gpc is disabled: (1) username, (2) password in authenticate.php, and (3) ID in pwn.php. Affected software ...