← All advisories

Critical severity9.8NVD Advisory· Published Jun 12, 2018· Updated Jun 17, 2026

CVE-2017-18291

CVE-2017-18291

Description

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter.

Affected products

2

Pvpgn/Statsinferred2 versions
=2.4.6+ 1 more
- (no CPE)range: =2.4.6
- (no CPE)range: =2.4.6

Patches

Vulnerability mechanics

References

1

rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.