Sql injection

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sortdirection parameter...

CVE-2017-18289

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exist in ladder/stats.php via the GET type parameter...

CVE-2017-18287

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST usersearch parameter...

CVE-2017-18291

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter...

CVE-2017-18289

PvPGN Stats 2.4.6 contains an SQL injection in ladder/stats.php triggered by an unsafely handled GET type parameter. The issue is documented across multiple sources (NVD, Red Hat, CNVD, CVE listing) as a SQL injection that could allow remote attackers to access the PvPGN database, potentially exp...

CVE-2017-18288

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter...

CVE-2017-18288

The CVE-2017-18288 issue affects PvPGN Stats 2.4.6. A SQL injection exists in ladder/stats.php via the GET game parameter, due to insufficient input filtering in the code. This can allow an attacker to manipulate database queries, potentially accessing sensitive data. The connected Red Hat and CN...

CVE-2017-18287

PvPGN Stats 2.4.6 is vulnerable to SQL injection in ladder/stats.php via the POST user_search parameter. The issue (CVE-2017-18287) allows an attacker to manipulate queries, potentially exposing the PvPGN database (including email, username, and password). No patch/version details are provided in...

CVE-2017-18291

The CVE-2017-18291 issue affects PvPGN Stats 2.4.6, where the ladder/stats.php script is vulnerable to SQL injection via the GET parameter user due to failure to filter database queries. This vulnerability can lead to unauthorized access to the PvPGN database (including email, username and passwo...

CVE-2017-18290

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sortdirection parameter...

CVE-2017-18290

CVE-2017-18290 affects PvPGN Stats 2.4.6. A SQL injection flaw exists in ladder/stats.php exploitable via the GET sort_direction parameter, enabling access to the PvPGN database (including emails, usernames, and passwords per CNVD). CVSS: 2.0/3.0 indicate high/critical impact on confidentiality, ...

CVE-2017-18289

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exist in ladder/stats.php via the GET type parameter...

CVE-2017-18287: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST usersearch parameter...

PT-2018-6018

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue arises when the value of fix param-num chans received from firmware is too large, causing an integer overflow in the wma radio chan stats event handler function. This overflo...

PT-2018-6808

Name of the Vulnerable Software and Affected Versions: PvPGN Stats version 2.4.6 Description: A SQL Injection issue exists in the ladder/stats.php file via the sort direction parameter. This allows for potential exploitation. Recommendations: For PvPGN Stats version 2.4.6, consider restricting...

PT-2018-6805

Name of the Vulnerable Software and Affected Versions: PvPGN Stats version 2.4.6 Description: A SQL Injection issue exists in the ladder/stats.php file via the game parameter in the GET request. This allows for potential exploitation of the database. Recommendations: For PvPGN Stats version 2.4.6...

PT-2018-6809

Name of the Vulnerable Software and Affected Versions: PvPGN Stats version 2.4.6 Description: A SQL Injection issue exists in the ladder/stats.php file via the user parameter in the GET request. Recommendations: For PvPGN Stats version 2.4.6, consider restricting access to the ladder/stats.php fi...

PT-2018-6804

Name of the Vulnerable Software and Affected Versions: PvPGN Stats version 2.4.6 Description: A SQL Injection issue exists in the ladder/stats.php file via the user search parameter. This allows for potential exploitation. Recommendations: For PvPGN Stats version 2.4.6, consider restricting acces...

PT-2018-6806

Name of the Vulnerable Software and Affected Versions: PvPGN Stats version 2.4.6 Description: A SQL Injection issue exists in the ladder/stats.php file via the type parameter. This allows for potential exploitation of the database. Recommendations: For PvPGN Stats version 2.4.6, consider...

CVE-2017-18288: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter...