CVE-2006-7173

PHP-Stats <0.1.9.1b - Code Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-7173. PoCs published by rgod.

AI-analyzed exploit summary This exploit leverages a vulnerability in Php-Stats <= 0.1.9.1b to inject PHP code via the `report_w_day` parameter, then executes arbitrary commands through the `S` HTTP header. It requires admin credentials to modify settings and trigger the payload.

Description

Direct static code injection vulnerability in admin.php in PHP-Stats 0.1.9.1b and earlier allows remote attackers to execute arbitrary PHP code via a crafted option_new[report_w_day] parameter in a preferenze action, which can be later accessed via option/php-stats-options.php.

Exploits (1)

exploitdb WORKING POC VERIFIED
by rgod · phpwebappsphp
https://www.exploit-db.com/exploits/3502

This exploit leverages a vulnerability in Php-Stats <= 0.1.9.1b to inject PHP code via the `report_w_day` parameter, then executes arbitrary commands through the `S` HTTP header. It requires admin credentials to modify settings and trigger the payload.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Php-Stats <= 0.1.9.1b
Auth required
Prerequisites: Admin credentials · Access to the admin panel
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/24553
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1004
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/3502

Scores

EPSS 0.0382
EPSS Percentile 88.7%

Details

Status published
Products (1)
php-stats/php-stats < 0.1.9.1b
Published Mar 20, 2007
Tracked Since Feb 18, 2026