Skip to content

CVE-2017-18288 An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter.

CriticalCVSS 9.8 EPSS 1.0%
Published
Updated
Exploit status
No public exploit known

Description

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter.

Affected products

ProductAffected versionsFixed in
pvpgn stats = 2.4.6 No fix listed

References

  • rchase.com exploit issue-tracking third-party-advisory