CVE-2009-3659

CVE-2009-3659 affects BS Counter 2.5.3, where an SQL injection vulnerability exists in file/stats.php exploitable via the page parameter. The issue enables remote attackers to execute arbitrary SQL commands, with CVSS v2 base score 7.5 (HIGH) and network attack vector, low complexity, no authenti...