← Back

Phgstats

phgstats

Vendor: Woah Projekt • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Woah Projekt
1Phgstats
Apr 16, 2026
Jan 11, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
phgstats.inc.php in phgstats before 0.5.1, if register_globals is enabled, allows remote attackers to include arbitrary files and execute arbitrary PHP code by modifying the PHGDIR variable.