CVE-2007-2812 Cross-site scripting (XSS) vulnerability in hlstats.php in HLstats 1.35, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) the action pa...
MediumCVSS 4.3
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in hlstats.php in HLstats 1.35, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO or (2) the action parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hlstats | <= 1.35 | No fix listed |
References
- 36215 vdb-entry
- 25340 third-party-advisory vendor-advisory
- 2724 third-party-advisory
- 20070519 RedLevel Advisory #016 - HLstats v1.35 Cross-Site Scripting Vulnerability mailing-list
- 20070519 RedLevel Advisory #017 - HLstats v1.35 Cross-Site Scripting Vulnerability #2 mailing-list
- 24063 exploit vdb-entry
- 24102 vdb-entry
- ADV-2007-1882 vdb-entry
- hlstats-unspecified-xss(34382) vdb-entry
- hlstats-action-xss(34383) vdb-entry