Unrated severityNVD Advisory· Published Mar 9, 2006· Updated Jun 16, 2026

CVE-2006-1084

Description

Multiple SQL injection vulnerabilities in PHP-Stats 0.1.9.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the option[prefix] parameter in admin.php and other unspecified PHP scripts, and (2) the PC_REMOTE_ADDR HTTP header to click.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PHP Stats/Phpstats2 versions
cpe:2.3:a:php-stats:php-stats:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:php-stats:php-stats:*:*:*:*:*:*:*:*range: <=0.1.9.1
- (no CPE)range: <=0.1.9.1

Patches

Vulnerability mechanics

References

retrogod.altervista.org/php_stats_0191_adv.htmlnvdExploit
secunia.com/advisories/19116nvdVendor Advisory
www.phpstats.net/forum/viewtopic.phpnvd
www.securityfocus.com/archive/1/426762/100/0/threadednvd
www.securityfocus.com/archive/1/428614/100/0/threadednvd
www.securityfocus.com/archive/1/429145/100/0/threadednvd
www.securityfocus.com/bid/16963nvd
www.vupen.com/english/advisories/2006/0822nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000