2 matches found
Sql injection
SQL injection vulnerability in inc/incstatistics.php in MemHT Portal 3.9.0 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via a statsres cookie to index.php...
6.8CVSS9AI score0.01213EPSS
SaveExploits1References7Affected Software1
CVE-2008-4457: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in inc/incstatistics.php in MemHT Portal 3.9.0 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via a statsres cookie to index.php...
6.8CVSS6.4AI score0.01213EPSS
SaveExploits1References2
20