Lucene search
K

6 matches found

seebug.org
seebug.org
added 2014/07/01 12:0 a.m.11 views

PHPStats 0.1.9 PHP-Stats-Options.PHP Remote Code Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23008/info PhpStats is prone to a remote code-execution vulnerability because the application fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary PHP code on an affected compute...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.19 views

Php-Stats <= 0.1.9.1b (PC-REMOTE-ADDR) SQL Injection Exploit

No description provided by source. ?php printr' --------------------------------------------------------------------------- Php-Stats = 0.1.9.1b PC-REMOTE-ADDR sql injection / cleat text admin pass disclosure by rgod mail: retrog at alice dot it site: http://retrogod.altervista.org...

7.1AI score
Exploits0
Cvelist
Cvelist
added 2007/03/20 10:0 p.m.21 views

CVE-2006-7173

Direct static code injection vulnerability in admin.php in PHP-Stats 0.1.9.1b and earlier allows remote attackers to execute arbitrary PHP code via a crafted optionnewreportwday parameter in a preferenze action, which can be later accessed via option/php-stats-options.php...

7.7AI score0.08304EPSS
Exploits0References3
exploitpack
exploitpack
added 2007/03/17 12:0 a.m.13 views

phpStats 0.1.9 - PHP-Stats-options.php Remote Code Execution

phpStats 0.1.9 - PHP-Stats-options.php Remote Code Execution source: https://www.securityfocus.com/bid/23008/info PhpStats is prone to a remote code-execution vulnerability because the application fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary PHP...

8.1AI score
Exploits0
Exploit DB
Exploit DB
added 2007/03/16 12:0 a.m.14 views

phpStats 0.1.9 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/23003/info Php-Stats is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application,...

7.4AI score
Exploits0
0day.today
0day.today
added 2007/03/16 12:0 a.m.43 views

Php-Stats <= 0.1.9.1b (PC-REMOTE-ADDR) SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Php-Stats 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$str...

7.1AI score
Exploits0
Rows per page
Query Builder