CVE-2022-25307

The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the platform parameter found in the /includes/class-wp-statistics-hits.php file which allows attackers to inject arbitrary web scripts onto several pages that execute when sit...

CVE-2022-25149

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the IP parameter found in the /includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive...

CVE-2022-0651

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the currentpagetype parameter found in the /includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain...

CVE-2022-25307: Improper Neutralization of Input During Web Page Generation

The WP Statistics WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the platform parameter found in the /includes/class-wp-statistics-hits.php file which allows attackers to inject arbitrary web scripts onto several pages that execute when sit...

CVE-2022-0651: Improper Neutralization of Special Elements used in an SQL Command

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the currentpagetype parameter found in the /includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain...

CVE-2022-25148: Improper Neutralization of Special Elements used in an SQL Command

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the currentpageid parameter found in the /includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain...

PT-2022-17100

Name of the Vulnerable Software and Affected Versions WP Statistics versions up to and including 13.1.5 Description The issue is related to SQL Injection due to insufficient escaping and parameterization of the IP parameter in the /includes/class-wp-statistics-hits.php file. This allows attackers...

PT-2022-13330

Name of the Vulnerable Software and Affected Versions WP Statistics versions up to and including 13.1.5 Description The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current page type parameter found in the...

PT-2022-17202

Name of the Vulnerable Software and Affected Versions WP Statistics versions up to and including 13.1.5 Description The issue arises from insufficient escaping and sanitization of the platform parameter in the /includes/class-wp-statistics-hits.php file, allowing attackers to inject arbitrary web...

mystats (hits.php) Multiple Vulnerabilities exploit

No description provided by source. myStats hits.php Multiple Remote Vulnerabilities Exploit url: http://mywebland.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk...

CVE-2008-4643

SQL injection vulnerability in hits.php in myWebland myStats allows remote attackers to execute arbitrary SQL commands via the sortby parameter...

CVE-2008-4644

hits.php in myWebland myStats allows remote attackers to bypass IP address restrictions via a modified X-Forwarded-For HTTP header...

Sql injection

SQL injection vulnerability in hits.php in myWebland myStats allows remote attackers to execute arbitrary SQL commands via the sortby parameter...

CVE-2008-4644

CVE-2008-4644 affects hits.php in the myWebland myStats component, where remote attackers can bypass IP address restrictions by tampering with the X-Forwarded-For HTTP header. The vulnerability is triggered by trusting a manipulated X-Forwarded-For value, allowing bypass of access controls intend...

CVE-2008-4643

CVE-2008-4643 describes an SQL injection vulnerability in hits.php of the myWebland myStats module. The sortby parameter is exploitable by remote attackers to execute arbitrary SQL commands. The document set confirms the vulnerability and CVE details but does not provide exploitation data or a do...

CVE-2008-4643

SQL injection vulnerability in hits.php in myWebland myStats allows remote attackers to execute arbitrary SQL commands via the sortby parameter...

CVE-2008-4643: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in hits.php in myWebland myStats allows remote attackers to execute arbitrary SQL commands via the sortby parameter...

CVE-2008-4644: Undefined Security Weakness

hits.php in myWebland myStats allows remote attackers to bypass IP address restrictions via a modified X-Forwarded-For HTTP header...

mystats-multi.txt

myStats hits.php Multiple Remote Vulnerabilities Exploit url: http://mywebland.com/ Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose. Use it at your own risk. Author will be not responsible for...

myStats (hits.php) Multiple Remote Vulnerabilities Exploit

Exploit for unknown platform in category web applications ========================================================== myStats hits.php Multiple Remote Vulnerabilities Exploit ========================================================== myStats hits.php Multiple Remote Vulnerabilities Exploit url:...