Description
SQL injection vulnerability in view_news.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the news_id parameter. NOTE: the game_id vector is already covered by CVE-2008-4460.
References
- http://packetstormsecurity.org/0909-exploits/mmorpgzone-sql.txt
- mmorpgzone-viewnews-sql-injection(53436) vdb-entry
- 36483 vdb-entry
- ADV-2009-2734 vdb-entry