121 matches found
CVE-2017-18288
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter...
CVE-2017-18288
The CVE-2017-18288 issue affects PvPGN Stats 2.4.6. A SQL injection exists in ladder/stats.php via the GET game parameter, due to insufficient input filtering in the code. This can allow an attacker to manipulate database queries, potentially accessing sensitive data. The connected Red Hat and CN...
CVE-2017-18291
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter...
CVE-2017-18290
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sortdirection parameter...
CVE-2017-18288: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter...
CVE-2017-18291: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter...
CVE-2017-18290: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sortdirection parameter...
CVE-2017-18289: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exist in ladder/stats.php via the GET type parameter...
PT-2018-6805
Name of the Vulnerable Software and Affected Versions: PvPGN Stats version 2.4.6 Description: A SQL Injection issue exists in the ladder/stats.php file via the game parameter in the GET request. This allows for potential exploitation of the database. Recommendations: For PvPGN Stats version 2.4.6...
CVE-2017-18287: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST usersearch parameter...
PT-2018-6806
Name of the Vulnerable Software and Affected Versions: PvPGN Stats version 2.4.6 Description: A SQL Injection issue exists in the ladder/stats.php file via the type parameter. This allows for potential exploitation of the database. Recommendations: For PvPGN Stats version 2.4.6, consider...
PT-2018-6809
Name of the Vulnerable Software and Affected Versions: PvPGN Stats version 2.4.6 Description: A SQL Injection issue exists in the ladder/stats.php file via the user parameter in the GET request. Recommendations: For PvPGN Stats version 2.4.6, consider restricting access to the ladder/stats.php fi...
PT-2018-6804
Name of the Vulnerable Software and Affected Versions: PvPGN Stats version 2.4.6 Description: A SQL Injection issue exists in the ladder/stats.php file via the user search parameter. This allows for potential exploitation. Recommendations: For PvPGN Stats version 2.4.6, consider restricting acces...
PT-2018-6808
Name of the Vulnerable Software and Affected Versions: PvPGN Stats version 2.4.6 Description: A SQL Injection issue exists in the ladder/stats.php file via the sort direction parameter. This allows for potential exploitation. Recommendations: For PvPGN Stats version 2.4.6, consider restricting...
CVE-2016-9457
Revive Adserver before 3.2.3 suffers from Reflected XSS. www/admin/stats.php is vulnerable to reflected XSS attacks via multiple parameters that are not properly sanitised or escaped when displayed, such as setPerPage, pageId, bannerid, periodstart, periodend, and possibly others...
CVE-2016-9457
Revive Adserver before 3.2.3 suffers from Reflected XSS. "www/admin/stats.php" is vulnerable to reflected XSS attacks via multiple parameters that are not properly sanitised or escaped when displayed, such as setPerPage, pageId, bannerid, periodstart, periodend, and possibly others...
CVE-2016-9457: Improper Neutralization of Input During Web Page Generation
Revive Adserver before 3.2.3 suffers from Reflected XSS. www/admin/stats.php is vulnerable to reflected XSS attacks via multiple parameters that are not properly sanitised or escaped when displayed, such as setPerPage, pageId, bannerid, periodstart, periodend, and possibly others...
PT-2017-10148
Name of the Vulnerable Software and Affected Versions Revive Adserver versions prior to 3.2.3 Description The issue affects the "www/admin/stats.php" endpoint, which is vulnerable to reflected XSS attacks. This is due to multiple parameters not being properly sanitised or escaped when displayed,...
wuzhicms coreframe\app\content\stats.php parameters keyid SQL injection
No description provided by source...
pdfes.eprensa.com XSS vulnerability
Vulnerable URL: http://pdfes.eprensa.com/php/stats.php?ClientName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...