CVEvulnerability
CVE-2017-20099
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2022-06-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.3 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-94
Description
A vulnerability was found in Analytics Stats Counter Statistics Plugin 1.2.2.5 and classified as critical. This issue affects some unknown processing. The manipulation leads to code injection. The attack may be initiated remotely.
Affected configurations
• analytics stats counter statistics project analytics stats counter statistics 1.2.2.5
Related
Weakness · CWE (1)
- CWE-94 Improper Control of Generation of Code weakness
References
- http://seclists.org/fulldisclosure/2017/Feb/74 Exploit, Mailing List, Third Party Advisory
- https://vuldb.com/?id.97367 Third Party Advisory
- http://seclists.org/fulldisclosure/2017/Feb/74 Exploit, Mailing List, Third Party Advisory
- https://vuldb.com/?id.97367 Third Party Advisory