e107 Games System exploit

[willey_wonka@xxxxxxxxxxx]

You get insert a highscore into game_score.php using post method. The system uses these variables, so a simple form will allow you to add a highscore.
$player_name = $_POST['name'];
$player_score = $_POST['score'];
$game_name = $_POST['game'];

willeh
willey_wonka at hotmail dot com