Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 7

Export CSV
CVE-2008-5370

pvpgn-support-installer in pvpgn 1.8.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/pvpgn-support-1.0.tar.gz temporary file.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Pvpgn
Products
Pvpgn
CVE-2004-2705

Unspecified vulnerability in Player vs. Player Gaming Network (PvPGN) before 1.6.4 allows remote attackers to obtain attributes of arbitrary accounts, including the password hash, via certain statsreq packets.

CVSS 2.0 · 5.0 Medium EPSS 1.4% KEV · Not listed
Vendors
Pvpgn
Products
Pvpgn
CVE-2017-18291

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter.

CVSS 3.0 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Pvpgn
Products
Stats
CVE-2017-18290

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sort_direction parameter.

CVSS 3.0 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Pvpgn
Products
Stats
CVE-2017-18289

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exist in ladder/stats.php via the GET type parameter.

CVSS 3.0 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Pvpgn
Products
Stats
CVE-2017-18288

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter.

CVSS 3.0 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Pvpgn
Products
Stats
CVE-2017-18287

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST user_search parameter.

CVSS 3.0 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Pvpgn
Products
Stats