← Database

CVE-2008-1163

HIGH CVSS: 7.5 Published: 2008-03-05 Modified: 2026-06-16

Description

SQL injection vulnerability in index.php in phpArcadeScript 1.0 through 3.0 RC2 allows remote attackers to execute arbitrary SQL commands via the userid parameter in a profile action.

Affected Platforms

Phparcadescript Phparcadescript

Weakness Type

CWE-89

References