CVE-2006-6403

mystats.php in MyStats 1.0.8 and earlier allows remote attackers to obtain the installation path via 1 details and 2 by array parameters, probably resulting in a path disclosure in an error message...

CVE-2006-6402

CVE-2006-6402 describes a SQL injection in the file mystats.php of MyStats 1.0.8 and earlier via the details parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands . Documents list the affected product and impact but do not provide exploitation steps, affected vers...

CVE-2006-6402: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mystats.php in MyStats 1.0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the details parameter...

CVE-2006-6403: Undefined Security Weakness

mystats.php in MyStats 1.0.8 and earlier allows remote attackers to obtain the installation path via 1 details and 2 by array parameters, probably resulting in a path disclosure in an error message...

CVE-2006-6401: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in mystats.php in MyStats 1.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 connexion, 2 by, and 3 details parameter...