CVE-2008-0843 StatCounteX 3.0 and 3.1 allows remote attackers to obtain sensitive information and edit configuration scripts via a direct request to admin.asp.
MediumCVSS 6.4
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
StatCounteX 3.0 and 3.1 allows remote attackers to obtain sensitive information and edit configuration scripts via a direct request to admin.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| statcountex | = 3.0 | No fix listed |
| statcountex | = 3.1 | No fix listed |
References
- packetstormsecurity.org
- 28984 third-party-advisory vendor-advisory
- 3675 exploit third-party-advisory
- 11434 exploit
- 20080214 StatCounteX 3.0 & 3.1 Admin Vulnerability mailing-list
- 27814 vdb-entry