Her0

**Name of the Vulnerable Software and Affected Versions** FlashBlog (affected versions not specified) **Description** The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `articulo id` parameter in the php/leer comentarios.php file. **Recommendations** For FlashBlog, consider restricting access to the `articulo id` parameter in the php/leer comentarios.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: PHPAdventure versions 1.1-Alpha and earlier Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the ` mygamefile` parameter in the ad main.php file. Recommendations: For PHPAdventure versions 1.1-Alpha and earlier, consider restricting access to the ad main.php file or the ` mygamefile` parameter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.