CVE-2017-18287: Pvpgn Stats

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST user_search parameter.

Affected products

• Pvpgn Stats: version 2.4.6 only

Published 2018-06-12. Last modified 2026-06-17.