CVE-2009-3961

EUVD-2009-3932
SQL injection vulnerability in user.php in Super Serious Stats (aka superseriousstats) before 1.1.2p1 allows remote attackers to execute arbitrary SQL commands via the uid parameter, related to an "incorrect regexp." NOTE: some of these details are obtained from third party information.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 61%
Affected Products (NVD)
VendorProductVersion
jos_de_ruijtersuperseriousstats
𝑥
≤ 1.1.2
jos_de_ruijtersuperseriousstats
1.0.13
jos_de_ruijtersuperseriousstats
1.0.14
jos_de_ruijtersuperseriousstats
1.0.15
jos_de_ruijtersuperseriousstats
1.0.16
jos_de_ruijtersuperseriousstats
1.1.0
jos_de_ruijtersuperseriousstats
1.1.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://code.google.com/p/superseriousstats/
http://secunia.com/advisories/37316
http://www.vupen.com/english/advisories/2009/3175
http://code.google.com/p/superseriousstats/
http://secunia.com/advisories/37316
http://www.vupen.com/english/advisories/2009/3175