Vulnerability Database

296,335

Total vulnerabilities in the database

CVE-2006-7173

Direct static code injection vulnerability in admin.php in PHP-Stats 0.1.9.1b and earlier allows remote attackers to execute arbitrary PHP code via a crafted option_new[report_w_day] parameter in a preferenze action, which can be later accessed via option/php-stats-options.php.

  • Published: Mar 20, 2007
  • Updated: Apr 13, 2023
  • CVE: CVE-2006-7173
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
php-stats / php-stats - 0.1.9.1b.x