← All advisories

Critical severity9.8NVD Advisory· Published Jun 12, 2018· Updated Jun 17, 2026

CVE-2017-18287

CVE-2017-18287

Description

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST user_search parameter.

Affected products

2

Pvpgn/Statsinferred
Range: <=2.4.6
PvPGN Stats/PvPGN Statsllm-create
Range: =2.4.6

Patches

Vulnerability mechanics

References

1

rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.