GCVE - cpe:2.3:a:pvpgn:stats:2.4.6:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:pvpgn:stats:2.4.6:*:*:*:*:*:*:*

part: a version: 2.4.6 update: *

Vendor	Pvpgn (`7964a690-eb05-53c7-a274-e317ab830c68`)
Product	Stats (`99e5ee97-967d-570c-8ce2-2539771c323c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/pvpgn/phputils`	purl2cpe	2026-06-01 10:17:16.473689

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-18291`	vulnerable	2026-06-08 05:09:10.742709	Details available An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter. Published: 2018-06-12T18:00:00.000Z Updated: 2024-09-17T02:42:13.044Z Open on db.gcve.eu Reference links https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-18290`	vulnerable	2026-06-08 05:09:10.742423	Details available An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sort_direction parameter. Published: 2018-06-12T18:00:00.000Z Updated: 2024-09-16T16:48:19.584Z Open on db.gcve.eu Reference links https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-18289`	vulnerable	2026-06-08 05:09:10.741996	Details available An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exist in ladder/stats.php via the GET type parameter. Published: 2018-06-12T18:00:00.000Z Updated: 2024-09-16T20:02:23.024Z Open on db.gcve.eu Reference links https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-18288`	vulnerable	2026-06-08 05:09:10.741707	Details available An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter. Published: 2018-06-12T18:00:00.000Z Updated: 2024-09-16T20:32:38.061Z Open on db.gcve.eu Reference links https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-18287`	vulnerable	2026-06-08 05:09:10.741310	Details available An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST user_search parameter. Published: 2018-06-12T18:00:00.000Z Updated: 2024-09-17T01:41:07.555Z Open on db.gcve.eu Reference links https://rchase.com/blog/posts/pvpgn-stats-multiple-sql-injection-vulnerabilities/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.