Vulnerabilities

TI-2008-00882 CVE-2008-0918 · GHSA-rf6q-m37m-q323

SQL injection vulnerability in includes/count_dl_or_link.inc.php in the astatsPRO…

LOW 35

SQL injection vulnerability in includes/count_dl_or_link.inc.php in the astatsPRO (com_astatspro) 1.0.1 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to getfile.php,…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00905 Published 2008-02-22 No fix listed CWE-89

TI-2008-00805 CVE-2008-0839 · GHSA-gpgm-9mr9-v2qj

SQL injection vulnerability in refer.php in the astatsPRO (com_astatspro) 1.0 component…

LOW 35

SQL injection vulnerability in refer.php in the astatsPRO (com_astatspro) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0101 Published 2008-02-20 No fix listed CWE-89

TI-2004-02475 CVE-2004-2605 · GHSA-qr4x-6cmr-2rc9

aStats 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on (1)…

LOW 11

aStats 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on (1) the aStats-Graphic-Signature-Generation file and (2) certain PNG image files.

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00348 Published 2005-11-29 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in includes/count_dl_or_link.inc.php in the astatsPRO…

SQL injection vulnerability in refer.php in the astatsPRO (com_astatspro) 1.0 component…

aStats 1.6.5 allows local users to overwrite arbitrary files via a symlink attack on (1)…