GCVE - cpe:2.3:a:hlstats:hlstats:1.34:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:hlstats:hlstats:1.34:*:*:*:*:*:*:*

part: a version: 1.34 update: *

Vendor	Hlstats (`a01240bc-b75f-5087-abdc-cfb1524a1b3c`)
Product	Hlstats (`b8215f80-9440-5a5e-bf48-7150d5ff05ad`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-0840`	vulnerable	2026-06-08 04:49:33.466100	Details available Cross-site scripting (XSS) vulnerability in HLstats before 1.35 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the search class. NOTE: it is possible that this issue overlaps CVE-2006-4543.3 or CVE-2006-4454. Published: 2007-02-08T02:00:00.000Z Updated: 2024-08-07T12:34:21.207Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/22422 http://osvdb.org/33099 http://sourceforge.net/project/shownotes.php?release_id=484226 http://secunia.com/advisories/24062	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6781`	vulnerable	2026-06-08 04:49:29.732844	Details available HLstats 1.20 through 1.34 allows remote attackers to obtain sensitive information via playinfo mode, with certain values of the player and playerdata[lastName][] parameters, which reveals the path in an error message. Published: 2006-12-28T00:00:00.000Z Updated: 2024-08-07T20:42:06.603Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/3002 http://securityreason.com/securityalert/2064 http://www.securityfocus.com/archive/1/455305/100/0/threaded http://www.securityfocus.com/bid/21740	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-6780`	vulnerable	2026-06-08 04:49:29.732423	Details available SQL injection vulnerability in the login form in HLstats 1.20 through 1.34 allows remote attackers to execute arbitrary SQL commands via the killLimit parameter. Published: 2006-12-28T00:00:00.000Z Updated: 2024-08-07T20:42:06.521Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/3002 http://securityreason.com/securityalert/2064 http://www.vupen.com/english/advisories/2006/5183 http://secunia.com/advisories/23505 http://www.securityfocus.com/archive/1/455305/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4543`	vulnerable	2026-06-08 04:49:18.266378	Details available Cross-site scripting (XSS) vulnerability in index.php in HLStats 1.34 allows remote attackers to inject arbitrary web script or HTML via the (1) game parameter in players mode, the (2) weapon parameter in weaponinfo mode, the (3) st parameter in search mode, the (4) action parameter in actioninfo mode, and the (5) map parameter in mapinfo mode. Published: 2006-09-06T00:00:00.000Z Updated: 2024-08-07T19:14:47.625Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/444716/100/0/threaded http://secunia.com/advisories/21635 http://securityreason.com/securityalert/1490 http://www.securityfocus.com/bid/19771	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-4454`	vulnerable	2026-06-08 04:49:17.966914	Details available Cross-site scripting (XSS) vulnerability in hlstats.php in HLstats 1.34 allows remote attackers to inject arbitrary web script or HTML via the q parameter. Published: 2006-08-30T15:00:00.000Z Updated: 2024-08-07T19:14:46.938Z Open on db.gcve.eu Reference links http://secunia.com/advisories/21635 https://exchange.xforce.ibmcloud.com/vulnerabilities/28619 http://www.osvdb.org/28238 http://archives.neohapsis.com/archives/fulldisclosure/2006-08/0741.html http://www.securityfocus.com/bid/19745	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Hlstats

Notes

PURL mappings

Vulnerability references

Contribute