Bugtraq mailing list archives

e107 Games System exploit


From: willey_wonka () hotmail com
Date: 7 Nov 2005 19:20:38 -0000

You get insert a highscore into game_score.php using post method. The system uses these variables, so a simple form 
will allow you to add a highscore.
$player_name = $_POST['name'];
$player_score = $_POST['score'];
$game_name = $_POST['game'];

willeh
willey_wonka at hotmail dot com


Current thread: