critical9.8
CVE-2017-18290
An issue was discovered in PvPGN Stats 2.4.6.
Impact
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sort_direction parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pvpgn | Stats | Version 2.4.6 |