CVE-2017-18290: Pvpgn Stats

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sort_direction parameter.

Affected products

• Pvpgn Stats: version 2.4.6 only

Published 2018-06-12. Last modified 2026-06-17.