CVE-2006-7173

2007-03-2022:00:00

mitre

www.cve.org

7.7 High

AI Score

Confidence

Low

0.032 Low

EPSS

Percentile

91.3%

JSON

Direct static code injection vulnerability in admin.php in PHP-Stats 0.1.9.1b and earlier allows remote attackers to execute arbitrary PHP code via a crafted option_new[report_w_day] parameter in a preferenze action, which can be later accessed via option/php-stats-options.php.