Sql injection

SQL injection vulnerability in inc/incstatistics.php in MemHT Portal 3.9.0 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via a statsres cookie to index.php...