Back

CVE-2006-0238

SQL injection vulnerability in wp-stats.php in GaMerZ WP-Stats 2.0 allows remote attackers to execute arbitrary SQL commands via the author parameter.

Published: Jan 18, 2006 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
gamerz wp-stats *

GitHub Security Advisory GHSA-m3g3-p7r4-9r58

SQL injection vulnerability in wp-stats.php in GaMerZ WP-Stats 2.0 allows remote attackers to...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 1.41%

Top 30% most likely to be exploited

Threat Score 30.4 / 100

Data Sources

NVD EPSS GitHub