Igaming · Igaming · CVE-2008-0255
**Name of the Vulnerable Software and Affected Versions**
iGaming versions 1.3.1 and earlier
iGaming version 1.5
**Description**
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `section` parameter in the archive.php file.
**Recommendations**
For iGaming versions 1.3.1 and earlier, update to a version later than 1.3.1 to resolve the issue.
For iGaming version 1.5, update to a version later than 1.5 to resolve the issue.
As a temporary workaround, consider restricting access to the archive.php file until a patch is available.
Avoid using the `section` parameter in the archive.php file until the issue is resolved.