Description
SQL injection vulnerability in wp-stats.php in GaMerZ WP-Stats 2.0 allows remote attackers to execute arbitrary SQL commands via the author parameter.
References
- http://www.lesterchan.net/blogs/archives/2006/01/18/wp-stats-sql-injection-vulnerability
- http://osvdb.org/ref/22/22450-wpstats.txt
- ADV-2006-0192 vdb-entry
- 22450 vdb-entry
- http://www.lesterchan.net/blogs/
- wpstats-script-sql-injection(24163) vdb-entry
- 18471 third-party-advisory
- 16241 vdb-entry