← All advisories

Critical severity9.8NVD Advisory· Published Jun 12, 2018· Updated Jun 17, 2026

CVE-2017-18291

CVE-2017-18291

Description

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter.

Affected products

3

Pvpgn/Stats3 versions
cpe:2.3:a:pvpgn:stats:2.4.6:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:pvpgn:stats:2.4.6:*:*:*:*:*:*:*
- (no CPE)range: =2.4.6
- (no CPE)range: =2.4.6

Patches

Vulnerability mechanics

References

1

rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.