← All advisories

Critical severity9.8NVD Advisory· Published Jun 12, 2018· Updated Jun 17, 2026

CVE-2017-18287

CVE-2017-18287

Description

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST user_search parameter.

Affected products

3

Pvpgn/Stats2 versions
cpe:2.3:a:pvpgn:stats:2.4.6:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pvpgn:stats:2.4.6:*:*:*:*:*:*:*
- (no CPE)range: <=2.4.6
PvPGN Stats/PvPGN Statsllm-create
Range: =2.4.6

Patches

Vulnerability mechanics

References

1

rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.