PT-2023-9864 · Unknown · Igamingmodules Flashgames

Published 2023-03-05 · Updated 2024-05-17 · CVE-2008-10003

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions iGamingModules flashgames version 1.1.0

Description A critical issue was found in the software. It affects an unknown function of the file game.php. The manipulation of the lid argument leads to sql injection. This issue can be exploited remotely.

Recommendations Apply a patch to fix this issue. The patch name is 6e57683704885be32eea2ea614f80c9bb8f012c5. As a temporary workaround, consider restricting access to the game.php file or the lid argument until the patch is applied.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2008-10003

Affected Products

Igamingmodules Flashgames

References · 6

• https://github.com/iGamingModules/flashgames/commit/6e57683704885be32eea2ea614f80c9bb8f012c5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2008-10003 · Security Note
• https://t.me/cibsecurity/59428 · Telegram Post
• https://t.me/cvenotify/45531 · Telegram Post
• https://vuldb.com/?ctiid.222288 · Note
• https://vuldb.com/?id.222288 · Note