Vulnerabilities (CVE)

Filtered by vendor Ultrastats Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-3241 1 Ultrastats 1 Ultrastats 2024-02-28 7.5 HIGH N/A
SQL injection vulnerability in players-detail.php in UltraStats 0.2.136, 0.2.140, and 0.2.142 allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2008-6260 1 Ultrastats 1 Ultrastats 2024-02-28 7.5 HIGH N/A
SQL injection vulnerability in index.php in Ultrastats 0.2.144 and 0.3.11 allows remote attackers to execute arbitrary SQL commands via the serverid parameter.