CVE-2017-18291: Pvpgn Stats

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter.

Affected products

• Pvpgn Stats: version 2.4.6 only

Published 2018-06-12. Last modified 2026-06-17.