CVE-2006-6780

EPSS 1.2%

SQL injection vulnerability in the login form in HLstats 1.20 through 1.34 allows remote attackers to execute arbitrary SQL commands via the killLimit parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3002unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/23505 http://securityreason.com/securityalert/2064 https://www.exploit-db.com/exploits/3002 http://www.securityfocus.com/archive/1/455305/100/0/threaded http://www.securityfocus.com/bid/21740 http://www.vupen.com/english/advisories/2006/5183