CVE-2005-4012

2005-12-0511:00:00

mitre

www.cve.org

AI Score

5.9

Confidence

High

EPSS

0.029

Percentile

90.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in PHP Web Statistik 1.4 allows remote attackers to inject arbitrary web script or HTML via (1) the lastnumber parameter to stat.php and (2) the HTTP referer to pixel.php.

References

cert.uni-stuttgart.de/archive/bugtraq/2005/11/msg00325.html

freewebstat.com/changelog-english.html

secunia.com/advisories/17789

www.osvdb.org/21208

www.osvdb.org/21212

www.securityfocus.com/bid/15603

www.ush.it/2005/11/19/php-web-statistik/

www.vupen.com/english/advisories/2005/2645

exchange.xforce.ibmcloud.com/vulnerabilities/23379

exchange.xforce.ibmcloud.com/vulnerabilities/23385