high7.5
CVE-2006-6402
SQL injection vulnerability in mystats.php in MyStats 1.0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the details parameter.
Impact
SQL injection vulnerability in mystats.php in MyStats 1.0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the details parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mystats | Mystats | through 1.0.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=116344068502988&w=2
- http://secunia.com/advisories/22813
- http://securitytracker.com/id?1017210
- http://www.osvdb.org/displayvuln.php?osvdb_id=30318
- http://www.vupen.com/english/advisories/2006/4468
- http://marc.info/?l=bugtraq&m=116344068502988&w=2
- http://secunia.com/advisories/22813
- http://securitytracker.com/id?1017210
- http://www.osvdb.org/displayvuln.php?osvdb_id=30318
- http://www.vupen.com/english/advisories/2006/4468