Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2017-18288

EPSS 0.23% · P46
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2017-18288

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
PvPGN Stats SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PvPGN Stats是一款基于PHP的支持网站与PvPGN游戏服务器集成的工具，它能够显示服务器状态、梯形图页面等。 PvPGN Stats 2.4.6版本中的ladder/stats.php文件存在SQL注入漏洞，该漏洞源于程序没有过滤数据库查询。远程攻击者可借助GET ‘game’参数利用该漏洞获取PvPGN数据库的访问权限（包括：邮件、用户名和密码）。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2017-18288

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2017-18288

Please Login to view more intelligence information

Same Patch Batch · n/a · 2018-06-12 · 22 CVEs total

CVE-2018-12261Momentum Axel 720P 缓冲区错误漏洞
CVE-2018-12228Digium Asterisk Open Source 安全漏洞
CVE-2018-12227Digium Asterisk Open Source和Certified Asterisk 安全漏洞
CVE-2018-12229Public Knowledge Project Open Journal System 跨站脚本漏洞
CVE-2018-12233Linux kernel 安全漏洞
CVE-2018-12232Linux kernel 安全漏洞
CVE-2018-12249mruby 安全漏洞
CVE-2018-12248mruby 堆缓冲区错误漏洞
CVE-2018-12247mruby 安全漏洞
CVE-2018-5718Safe'N'Sec SoftControl/SafenSoft SysWatch、SoftControl/SafenSoft TPSecure和SoftControl/Safen
CVE-2018-12254Joomla! Harmis Ek rishta SQL注入漏洞
CVE-2017-15857Android Camera 权限许可和访问控制错误漏洞
CVE-2018-12260Momentum Axel 720P 安全漏洞
CVE-2018-12259Momentum Axel 720P 安全漏洞
CVE-2018-12258Momentum Axel 720P 安全漏洞
CVE-2018-12257Momentum Axel 720P 安全漏洞
CVE-2017-18291PvPGN Stats SQL注入漏洞
CVE-2017-18290PvPGN Stats SQL注入漏洞
CVE-2017-18289PvPGN Stats SQL注入漏洞
CVE-2017-18287PvPGN Stats SQL注入漏洞

Showing top 20 of 22 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2017-18288

No comments yet

Leave a comment