CVE-2007-3646 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-3646
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-3646

Description: SQL injection vulnerability in index.php in FlashGameScript 1.7 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a member action.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/35293 SAID Secunia Advisory: SA25960 OSVDB 36297 MILW0RM http://milw0rm.com/exploits/4161 CONFIRM http://flashgamescript.com/forum/viewtopic.php?t=425 BID 24809

Return to the previous page.