Mystats

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Mystats records in CISA KEV

No Mystats vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mystats 3 records LOW

Records

3 records in Mystats · all components

TI-2006-06150 CVE-2006-6402 · GHSA-2428-q37q-x8fm

SQL injection vulnerability in mystats.php in MyStats 1.0.8 and earlier allows remote…

LOW 36

SQL injection vulnerability in mystats.php in MyStats 1.0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the details parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0163 Published 2006-12-10 No fix listed CWE-89

TI-2006-06149 CVE-2006-6401 · GHSA-8r65-9cq7-x7hr

Multiple cross-site scripting (XSS) vulnerabilities in mystats.php in MyStats 1.0.8 and…

LOW 34

Multiple cross-site scripting (XSS) vulnerabilities in mystats.php in MyStats 1.0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) connexion, (2) by, and (3) details parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01767 Published 2006-12-10 No fix listed CWE-79

TI-2006-06151 CVE-2006-6403 · GHSA-4jwg-x7cx-4p4h

mystats.php in MyStats 1.0.8 and earlier allows remote attackers to obtain the…

LOW 26

mystats.php in MyStats 1.0.8 and earlier allows remote attackers to obtain the installation path via (1) details and (2) by array parameters, probably resulting in a path disclosure in an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01468 Published 2006-12-10 No fix listed

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0