[41090] in bugtraq
e107 Games System exploit
daemon@ATHENA.MIT.EDU (willey_wonka@hotmail.com)
Mon Nov 7 20:42:57 2005
Date: 7 Nov 2005 19:20:38 -0000
Message-ID: <20051107192038.17067.qmail@securityfocus.com>
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
From: willey_wonka@hotmail.com
To: bugtraq@securityfocus.com
You get insert a highscore into game_score.php using post method. The system uses these variables, so a simple form will allow you to add a highscore.
$player_name = $_POST['name'];
$player_score = $_POST['score'];
$game_name = $_POST['game'];
willeh
willey_wonka at hotmail dot com
