Multiple SQL injection vulnerabilities in php-stats.recjs.php in Php-Stats 0.1.9.2 allow remote attackers to execute arbitrary SQL commands via the (1) ip or (2) t parameter.Referenceshttps://www.exploit-db.com/exploits/4513http://osvdb.org/40608http://www.securityfocus.com/bid/26022