firestats

firestats has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2009; all 2 are fixed as of September 2026. Their average CVSS score is 9.9, and the most serious one scores 10.0 out of 10. Severity breakdown: 2 critical and 0 high. 2009 was the busiest year with 2 disclosures.

The most common weakness is PHP Remote File Inclusion, behind 1 of the records (50%). Other recurring categories include SQL Injection.

Every one of the 2 issues recorded for firestats has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by darkmasking.

Strategic Overview

Avg CVSSCritical

9.9/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all firestats vulnerabilities before they are exploited.

Highest severity on recordCVSS 10.0CVE-2009-2144

FireStats <1.6.2 - SQL Injection

Read the full analysis

Vulnerability Records

2 records


2009-06-22 00:00	FireStats <1.6.2 - SQL Injection firestats < 1.6.2	`CVE-2009-2144`	10.0 Critical	Anonymous	Yes
2009-06-12 00:00	FireStats < 1.6.2 - Remote File Inclusion firestats < 1.6.2	`CVE-2009-2143`	9.8 Critical	darkmasking	Yes

Showing 1–2 of 2 reports