CVE-2007-6307 Multiple cross-site scripting (XSS) vulnerabilities in clickstats.php in wwwstats 3.21 allow remote attackers to inject arbitrary web script or HTML via (1) the link parameter or (2) the User-Agent HT...
MediumCVSS 4.3
EPSS 4.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in clickstats.php in wwwstats 3.21 allow remote attackers to inject arbitrary web script or HTML via (1) the link parameter or (2) the User-Agent HTTP header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jfreechart | = 1.0.8 | No fix listed |
References
- 28002 third-party-advisory vendor-advisory
- 3431 third-party-advisory
- 20071207 [ISecAuditors Security Advisories] wwwstats is vulnerable to Persistent XSS mailing-list
- 26759 exploit patch vdb-entry
- www.timeprog.com patch
- wwwstats-clickstats-xss(38925) vdb-entry