CVE-2005-4012 Multiple cross-site scripting (XSS) vulnerabilities in PHP Web Statistik 1.4 allows remote attackers to inject arbitrary web script or HTML via (1) the lastnumber parameter to stat.php and (2) the HTT...
MediumCVSS 4.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in PHP Web Statistik 1.4 allows remote attackers to inject arbitrary web script or HTML via (1) the lastnumber parameter to stat.php and (2) the HTTP referer to pixel.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php web statistik | = 1.4 | No fix listed |
References
- 20051128 Php Web Statistik Multiple Vulnerabilities mailing-list vendor-advisory
- freewebstat.com
- 17789 third-party-advisory vendor-advisory
- 21208 vdb-entry
- 21212 vdb-entry
- 15603 vdb-entry
- www.ush.it exploit patch vendor-advisory
- ADV-2005-2645 vdb-entry
- phpwebstatistik-stat-xss(23379) vdb-entry
- phpwebstatistik-referer-xss(23385) vdb-entry