<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: pvpgn</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2017-18291: An issue was discovered in PvPGN Stats 2.4.6</title><link>https://patchthecve.com/cve/CVE-2017-18291.html</link><guid>https://patchthecve.com/cve/CVE-2017-18291.html</guid><pubDate>Wed, 17 Jun 2026 01:12:33 +0000</pubDate><description>CRITICAL 9.8: An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET user parameter.</description></item><item><title>CVE-2017-18290: An issue was discovered in PvPGN Stats 2.4.6</title><link>https://patchthecve.com/cve/CVE-2017-18290.html</link><guid>https://patchthecve.com/cve/CVE-2017-18290.html</guid><pubDate>Wed, 17 Jun 2026 01:12:33 +0000</pubDate><description>CRITICAL 9.8: An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET sort_direction parameter.</description></item><item><title>CVE-2017-18289: An issue was discovered in PvPGN Stats 2.4.6</title><link>https://patchthecve.com/cve/CVE-2017-18289.html</link><guid>https://patchthecve.com/cve/CVE-2017-18289.html</guid><pubDate>Wed, 17 Jun 2026 01:12:33 +0000</pubDate><description>CRITICAL 9.8: An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exist in ladder/stats.php via the GET type parameter.</description></item><item><title>CVE-2017-18288: An issue was discovered in PvPGN Stats 2.4.6</title><link>https://patchthecve.com/cve/CVE-2017-18288.html</link><guid>https://patchthecve.com/cve/CVE-2017-18288.html</guid><pubDate>Wed, 17 Jun 2026 01:12:33 +0000</pubDate><description>CRITICAL 9.8: An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the GET game parameter.</description></item><item><title>CVE-2017-18287: An issue was discovered in PvPGN Stats 2.4.6</title><link>https://patchthecve.com/cve/CVE-2017-18287.html</link><guid>https://patchthecve.com/cve/CVE-2017-18287.html</guid><pubDate>Wed, 17 Jun 2026 01:12:33 +0000</pubDate><description>CRITICAL 9.8: An issue was discovered in PvPGN Stats 2.4.6. SQL Injection exists in ladder/stats.php via the POST user_search parameter.</description></item></channel></rss>