PT-2023-9864 · Unknown · Igamingmodules Flashgames
CVE-2008-10003
·
Publicado
2023-03-05
·
Atualizado
2024-05-17
CVSS v2.0
6.5
Média
| Vetor | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
iGamingModules flashgames version 1.1.0
Description
A critical issue was found in the software. It affects an unknown function of the file game.php. The manipulation of the
lid argument leads to sql injection. This issue can be exploited remotely.Recommendations
Apply a patch to fix this issue. The patch name is 6e57683704885be32eea2ea614f80c9bb8f012c5. As a temporary workaround, consider restricting access to the
game.php file or the lid argument until the patch is applied.Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Igamingmodules Flashgames