critical9.8
CVE-2017-18287
An issue was discovered in PvPGN Stats 2.4.6.
Impact
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST user_search parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pvpgn | Stats | Version 2.4.6 |