CVE-2017-18289

概要

参考情報

• rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities · Exploit

stats のその他の脆弱性

• CVE-2017-18291緊急 9.8An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter.
• CVE-2017-18290緊急 9.8An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sort_direction parameter.
• CVE-2017-18288緊急 9.8An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter.
• CVE-2017-18287緊急 9.8An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST user_search parameter.