Unscored CVE-2006-3950 EUVD-2006-3943GHSA-w6h5-8p78-rx55

SQL injection vulnerability in x-statistics.php in X-Scripts X-Statistics 1.20 allows remote attackers to execute arbitrary SQL commands vi…

Published Aug 1, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in x-statistics.php in X-Scripts X-Statistics 1.20 allows remote attackers to execute arbitrary SQL commands via the User-Agent HTTP header.

References

20060729 X-Statics 1.20 SQL Injection Vulnerability mailing-list
19237 vdb-entry
xstatistics-xstatistics-sql-injection(28087) vdb-entry
ADV-2006-3059 vdb-entry
27636 vdb-entry
21281 third-party-advisory