Lucene search
HistoryMar 20, 2007 - 10:19 p.m.
CVE-2006-7172
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.4
Confidence
Low
EPSS
0.044
Percentile
92.5%
Multiple SQL injection vulnerabilities in php-stats.recphp.php in PHP-Stats 0.1.9.1b and earlier allow remote attackers to execute arbitrary code via a leading dotted-quad IP address string in the (1) PC-REMOTE-ADDR HTTP header, which is inserted into $_SERVER[‘HTTP_PC_REMOTE_ADDR’], or (2) ip parameter.
Affected configurations
Node
php-statsphp-statsRange≤0.1.9.1b
Related
exploitdb
exploitdb
PHP-Stats 0.1.9.1b - 'ip' SQL Injection
2007-03-16 00:00:00
PHP-Stats 0.1.9.1b - 'PC-REMOTE-ADDR' SQL Injection
2007-03-16 00:00:00
cve
cve
CVE-2006-7172
2007-03-20 22:19:00
cvelist
cvelist
CVE-2006-7172
2007-03-20 22:00:00
securityvulns
securityvulns
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.4
Confidence
Low
EPSS
0.044
Percentile
92.5%
Related for NVD:CVE-2006-7172