Sploitus

13 exploited vulnerabilities in Php-Stats

Vulnerabilities with publicly known exploits

Vendors
Php, Michael Wagner, Php-Stats
With known exploits
13
Affected Php-stats versions
= 0.1.9.2, 0.1.9.1b, 0.1.9.1
Affected Phpstats versions
= 0.1_alpha

Vulnerabilities with exploits

Highest CVSS first — 8 of these already have exploit code on Sploitus

CVE-2007-5452 1 exploit
CVSS 10.0 HIGH 2007-10-14FIX AVAILABLE
PHP-Stats 0.1.9.2 - Multiple Vulnerabilities
CVE-2006-7173 1 exploit
CVSS 10.0 HIGH 2007-03-20FIX AVAILABLE
PHP-Stats 0.1.9.1b - 'PHP-stats-options.php' Command Execution
CVE-2006-1085
CVSS 10.0 HIGH 2006-03-09
CVE-2007-5453 1 exploit
CVSS 8.5 HIGH 2007-10-14FIX AVAILABLE
PHP-Stats 0.1.9.2 - Multiple Vulnerabilities
CVE-2006-7172 2 exploits
CVSS 7.5 HIGH 2007-03-20FIX AVAILABLE
PHP-Stats 0.1.9.1b - 'PC-REMOTE-ADDR' SQL InjectionPHP-Stats 0.1.9.1b - 'ip' SQL Injection
CVE-2006-1084
CVSS 7.5 HIGH 2006-03-09FIX AVAILABLE
CVE-2006-1083
CVSS 7.5 HIGH 2006-03-09FIX AVAILABLE
CVE-2006-1087
CVSS 6.5 MEDIUM 2006-03-09FIX AVAILABLE
CVE-2006-1088
CVSS 5.0 MEDIUM 2006-03-09FIX AVAILABLE
CVE-2008-6212 1 exploit
CVSS 4.3 MEDIUM 2009-02-20
PHP-Stats 0.1.9.1 - 'admin.php' Multiple Cross-Site Scripting Vulnerabilities
CVE-2008-0125 2 exploits
CVSS 4.3 MEDIUM 2008-03-24FIX AVAILABLE
phpStats 0.1_alpha - 'phpStats.php' Cross-Site Scriptingphpstats0.1-xss.txt
CVE-2007-4917 1 exploit
CVSS 4.3 MEDIUM 2007-09-17FIX AVAILABLE
PHP-Stats 0.1.9.2 - 'Tracking.php' Cross-Site Scripting
CVE-2007-4334 1 exploit
CVSS 4.3 MEDIUM 2007-08-14FIX AVAILABLE
PHP-Stats 0.1.9.2 - 'WhoIs.php' Cross-Site Scripting