Unscored CVE-2006-6402 EUVD-2006-6385GHSA-2428-q37q-x8fm

SQL injection vulnerability in mystats.php in MyStats 1.0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the d…

Published Dec 10, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in mystats.php in MyStats 1.0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the details parameter.

References

22813 third-party-advisory
1017210 vdb-entry
20061112 MyStats <=1.0.8 [injection sql, multiples xss, array & full path mailing-list
ADV-2006-4468 vdb-entry
30318 vdb-entry