SQL Injection Vulnerability in GaMerZ WP-Stats Plugin by WordPress

CVE-2006-0238

Summary

The GaMerZ WP-Stats plugin version 2.0 for WordPress is vulnerable to SQL injection through the 'author' parameter of the wp-stats.php script. This vulnerability allows attackers to execute arbitrary SQL commands, potentially leading to unauthorized access to the database or sensitive information. It underscores the importance of securing input fields to prevent injection attacks and highlights the need for regular updates to ensure web application security.

References