Description
game_score.php in e107 allows remote attackers to insert high scores via HTTP POST methods utilizing the $player_name, $player_score, and $game_name variables.
References
- 158 third-party-advisory
- 20051107 e107 Games System exploit mailing-list