CVE-2006-1084

CVE-2006-1084 affects PHP-Stats versions 0.1.9.1 and earlier. The vulnerability stems from multiple SQL injection flaws in the application, notably via the parameter option[prefix] in admin.php and the PC_REMOTE_ADDR HTTP header to click.php. Successful exploitation could allow remote attackers t...