← All advisories

Critical severity9.8NVD Advisory· Published Jun 12, 2018· Updated Jun 17, 2026

CVE-2017-18289

CVE-2017-18289

Description

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exist in ladder/stats.php via the GET type parameter.

Affected products

2

Pvpgn/Statsinferred2 versions
= 2.4.6+ 1 more
- (no CPE)range: = 2.4.6
- (no CPE)range: =2.4.6

Patches

Vulnerability mechanics

References

1

rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.