CVE-2006-7173

published 2007-03-20

CVE-2006-7173: Direct static code injection vulnerability in admin.php in PHP-Stats 0.1.9.1b and earlier allows remote attackers to execute arbitrary PHP code via a crafted…

Priority P3 50 critical 10 CVSS 2.0

AV N AC L Au N C C I C A C

EXPLOIT

Direct static code injection vulnerability in admin.php in PHP-Stats 0.1.9.1b and earlier allows remote attackers to execute arbitrary PHP code via a crafted option_new[report_w_day] parameter in a preferenze action, which can be later accessed via option/php-stats-options.php.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
php-stats	php-stats	<= 0.1.9.1b	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.