LXer: Hlstats "killLimit" Parameter Handling Remote SQL Query Injection ...
 

Published at LXer:

A vulnerability has been identified in HLstats, which could be exploited by attackers to execute arbitrary SQL commands. This issue is due to an input validation error in the "hlstats.php" script that does not validate the "killLimit" parameter before being used in SQL statements, which could be exploited by malicious users to conduct SQL injection attacks.

Read More...