BugTraq
Back to list
|
Post reply
e107 Games System exploit
Nov 07 2005 07:20PM
willey_wonka hotmail com
You get insert a highscore into game_score.php using post method. The system uses these variables, so a simple form will allow you to add a highscore.
$player_name = $_POST['name'];
$player_score = $_POST['score'];
$game_name = $_POST['game'];
willeh
willey_wonka at hotmail dot com
[ reply ]
Privacy Statement
Copyright 2010, SecurityFocus
$player_name = $_POST['name'];
$player_score = $_POST['score'];
$game_name = $_POST['game'];
willeh
willey_wonka at hotmail dot com
[ reply ]