AV Arcade Free Edition suffers from a remote blind SQL injection vulnerability.
4824ee1aa6674200db80c124a518a0989e057c9427cda66c7cd6eaa0d9827641
##########################################
[~] Exploit Title: AV Arcade Free Edition Blind SQL Injection
[~] Date: 31/08/2012
[~] Author: DaOne (@LibyanCA)
[~] Software Link: http://www.avscripts.net/avarcade/freearcadescript/
[~] Google Dork: intext:Powered by AV Arcade Free Edition"
##########################################
# Exploit-DB Note: Must be logged in.
[#] [ Exploit ]
http://localhost/content/add_rating.php?id=[Blind SQL Injection]
##########################################
[*] thanks to : All LibyanCA Members (^_^)
##########################################