Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Eek

#37375of 53,624
7.5Total CVSS
Vulnerabilities · 1
PT-2009-1734
7.5
2009-02-24
Ultrastats · Ultrastats · CVE-2008-6260
Name of the Vulnerable Software and Affected Versions: Ultrastats versions 0.2.144 and 0.3.11 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `serverid` parameter in the "index.php" file. Recommendations: For Ultrastats version 0.2.144, avoid using the `serverid` parameter in the affected index.php file until the issue is resolved. For Ultrastats version 0.3.11, avoid using the `serverid` parameter in the affected index.php file until the issue is resolved.