Sql injection

2009-04-2014:30:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.1%

JSON

Multiple SQL injection vulnerabilities in stats/index.php in chCounter 3.1.3 allow remote attackers to execute arbitrary SQL commands via (1) the login_name parameter (aka the username field) or (2) the login_pw parameter (aka the password field).

CPENameOperatorVersion
chcountereq3.1.3

CPE	Name	Operator	Version
	chcounter	eq	3.1.3

References

secunia.com/advisories/24879

www.securityfocus.com/bid/34572

www.exploit-db.com/exploits/8461