phpstats-xss.txt

I have found an xss in whois.php page of php-stats. http://phpstats.net/ Here is the XSS php-stats-path/whois.php?IP=%22%3E%3Cscript%3Ealertdocument.cookie;%3C/script%3E...

CVE-2007-4334: Undefined Security Weakness

Cross-site scripting XSS vulnerability in whois.php in Php-stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML via the IP parameter...

php-stats xss whois.php

I have found an xss in whois.php page of php-stats. http://phpstats.net/ Here is the XSS php-stats-path/whois.php?IP=223E3Cscript3Ealertdocument.cookie;3C/script3E...

PHP-Stats 0.1.9.2 - WhoIs.php Cross-Site Scripting

PHP-Stats 0.1.9.2 - WhoIs.php Cross-Site Scripting source: https://www.securityfocus.com/bid/25275/info Php-Stats is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary scrip...

PHP-Stats 0.1.9.2 - 'WhoIs.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25275/info Php-Stats is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

WordPress Feed Stats Plugin <= 2.3 - Multiple XSS

Because of these vulnerabilities, the attackers can inject arbitrary web script or HTML via unspecified vectors. Solution Update the plugin...

Sql injection

SQL injection vulnerability in referralUrl.php in Traffic Stats allows remote attackers to execute arbitrary SQL commands via the offset parameter...

CVE-2007-3840

SQL injection vulnerability in referralUrl.php in Traffic Stats allows remote attackers to execute arbitrary SQL commands via the offset parameter...

CVE-2007-3840

SQL injection vulnerability in referralUrl.php in Traffic Stats allows remote attackers to execute arbitrary SQL commands via the offset parameter...

CVE-2007-3840

CVE-2007-3840 describes an SQL injection in referralUrl.php within Traffic Stats, exploitable via the offset parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, impacting data confidentiality and integrity. Connected documents corroborate the vulnerability in t...

CVE-2007-3840: Undefined Security Weakness

SQL injection vulnerability in referralUrl.php in Traffic Stats allows remote attackers to execute arbitrary SQL commands via the offset parameter...

Traffic Stats - referralUrl.php?offset SQL Injection

Traffic Stats - referralUrl.php?offset SQL Injection --==+================================================================================+==-- --==+ Traffic Stats SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR:...

Traffic Stats (referralUrl.php offset) Remote SQL Injection Vulnerbility

Exploit for unknown platform in category web applications ======================================================================== Traffic Stats referralUrl.php offset Remote SQL Injection Vulnerbility ========================================================================...

Sql injection

SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a stats action...

CVE-2007-3427: Undefined Security Weakness

SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a stats action...

CVE-2007-3288

Cross-site scripting XSS vulnerability in the skeltoac stats Automattic Stats 1.0 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer field...

CVE-2007-3288

The CVE-2007-3288 vulnerability affects the WordPress plugin Automattic Stats (skeltoac stats) version 1.0, where an XSS flaw allows remote attackers to inject arbitrary script or HTML via the HTTP Referer field. This is caused by insufficient input/output handling in the plugin, enabling cross-s...

CVE-2007-3288

Cross-site scripting XSS vulnerability in the skeltoac stats Automattic Stats 1.0 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer field...

wppersist-xss.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 1. DESCRIPTION OF THE SOFTWARE On May 6th, 2007 a new WordPress plugin called "stats" was released. This plugin allows a WordPress user who has his blog self-hosted to use the Wordpress.com statistics. The plugin includes a JavaScript on the blog page...

WordPress Automattic Stats Plugin <= 1.0 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the HTTP Referer field. Solution Update the plugin...