CVE-2011-5218

SQL injection vulnerability in DotA OpenStats 1.3.9 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.

Date published : 2012-10-25

http://www.securityfocus.com/bid/51110

http://www.exploit-db.com/exploits/18250