Ultrastats · Ultrastats · CVE-2008-6260
Name of the Vulnerable Software and Affected Versions:
Ultrastats versions 0.2.144 and 0.3.11
Description:
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `serverid` parameter in the "index.php" file.
Recommendations:
For Ultrastats version 0.2.144, avoid using the `serverid` parameter in the affected index.php file until the issue is resolved.
For Ultrastats version 0.3.11, avoid using the `serverid` parameter in the affected index.php file until the issue is resolved.