Security Advisory
CVE-2007-2167
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into config.php via the number parameter in an update action.