CVE-2017-18287

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST user_search parameter.

• CWE-89

• https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/Exploit, Issue Tracking, Third Party Advisory
• https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/Exploit, Issue Tracking, Third Party Advisory

Published

Jun 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-18281A bool variable in Video function, which gets typecasted to …
• CVE-2017-18282Non-secure SW can cause SDCC to generate secure bus accesses…
• CVE-2017-18283Possible memory corruption when Read Val Blob Req is receive…
• CVE-2017-18284The Gentoo app-backup/burp package before 2.1.32 sets the ow…
• CVE-2017-18285The Gentoo app-backup/burp package before 2.1.32 has incorre…
• CVE-2017-18286nZEDb v0.7.3.3 has XSS in the 404 error page.
• CVE-2017-18288An issue was discovered in PvPGN Stats 2.4.6. SQL Injection …
• CVE-2017-18289An issue was discovered in PvPGN Stats 2.4.6. SQL Injection …
• CVE-2017-1829Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-18290An issue was discovered in PvPGN Stats 2.4.6. SQL Injection …
• CVE-2017-18291An issue was discovered in PvPGN Stats 2.4.6. SQL Injection …
• CVE-2017-18292Secure app running in non secure space can restart TZ by cal…