CVE-2017-18289: Pvpgn Stats

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exist in ladder/stats.php via the GET type parameter.

Affected products

• Pvpgn Stats: version 2.4.6 only

Published 2018-06-12. Last modified 2026-06-17.