CVE-2017-18289

Mô tả

Tham khảo

• rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities · Exploit

Lỗ hổng khác của stats

• CVE-2017-18291NGHIÊM TRỌNG 9.8An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter.
• CVE-2017-18290NGHIÊM TRỌNG 9.8An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sort_direction parameter.
• CVE-2017-18288NGHIÊM TRỌNG 9.8An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter.
• CVE-2017-18287NGHIÊM TRỌNG 9.8An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST user_search parameter.