SQL Injection Vulnerability In IBProArcade

2005-01-02T00:00:00
ID SECURITYVULNS:DOC:7474
Type securityvulns
Reporter Securityvulns
Modified 2005-01-02T00:00:00

Description

A flaw exists in the high scores module of IbProArcade which allows malicious SQL Code to be executed on the database the board & arcade use.

Demo: http://www.ibproarcade.com/index.php?act=Arcade&do=stats&gameid=104FOO

Fix this vuln by following the following directions...

open your sources/Arcade.php file

Find this code bit:

[code] //---------------------------------------- // Show_Stats // // This shows the leaderboard // //----------------------------------------

   function show_stats() {

           global $ibforums, $DB, $std;[/code]

Directly under that, add..

[code]if(!is_numeric($ibforums->input['gameid'])) { $std->Error( array( 'LEVEL' => 1, 'MSG' => 'dont_try_it') ); }[/code]

then open up your lang/en/lang_Arcade.php file scroll down to the bottom where you will find

[code] );

?>[/code]

right above that, add this:

[code]

security

dont_try_it => "I don't think so annie."[/code]

And you're set.