Description

game_score.php in e107 allows remote attackers to insert high scores via HTTP POST methods utilizing the $player_name, $player_score, and $game_name variables.

Remediation

References

CVE-2005-3594

Related Vulnerabilities

WordPress Plugin Catch Themes Demo Import Unspecified Vulnerability (1.8)

Django Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2023-46695)

EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14331)

WebLogic Improper Input Validation Vulnerability (CVE-2021-44832)

Bootstrap Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-14040)

Severity

Medium

Classification

CVE-2005-3594

Tags

Missing Update Known Vulnerabilities