CVE-2007-3840: Undefined Security Weakness

SQL injection vulnerability in referralUrl.php in Traffic Stats allows remote attackers to execute arbitrary SQL commands via the offset parameter...

Traffic Stats - referralUrl.php?offset SQL Injection

Traffic Stats - referralUrl.php?offset SQL Injection --==+================================================================================+==-- --==+ Traffic Stats SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR:...

Traffic Stats (referralUrl.php offset) Remote SQL Injection Vulnerbility

Exploit for unknown platform in category web applications ======================================================================== Traffic Stats referralUrl.php offset Remote SQL Injection Vulnerbility ========================================================================...

Sql injection

SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a stats action...

CVE-2007-3427: Undefined Security Weakness

SQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the pageid parameter in a stats action...

CVE-2007-3288

Cross-site scripting XSS vulnerability in the skeltoac stats Automattic Stats 1.0 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer field...

CVE-2007-3288

The CVE-2007-3288 vulnerability affects the WordPress plugin Automattic Stats (skeltoac stats) version 1.0, where an XSS flaw allows remote attackers to inject arbitrary script or HTML via the HTTP Referer field. This is caused by insufficient input/output handling in the plugin, enabling cross-s...

CVE-2007-3288

Cross-site scripting XSS vulnerability in the skeltoac stats Automattic Stats 1.0 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer field...

WordPress Automattic Stats Plugin <= 1.0 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the HTTP Referer field. Solution Update the plugin...

wppersist-xss.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 1. DESCRIPTION OF THE SOFTWARE On May 6th, 2007 a new WordPress plugin called "stats" was released. This plugin allows a WordPress user who has his blog self-hosted to use the Wordpress.com statistics. The plugin includes a JavaScript on the blog page...

CVE-2007-3288: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the skeltoac stats Automattic Stats 1.0 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the HTTP Referer field...

CVE-2007-2716

Multiple cross-site scripting XSS vulnerabilities in EQdkp 1.3.2c and earlier allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 listmembers.php and 2 stats.php. NOTE: some of these details are obtained from third party information...

CVE-2007-1871: Undefined Security Weakness

Cross-site scripting XSS vulnerability in chcounter 3.1.3 allows remote attackers to inject arbitrary web script or HTML via the loginname parameter to /stats/...

CVE-2006-7173

Direct static code injection vulnerability in admin.php in PHP-Stats 0.1.9.1b and earlier allows remote attackers to execute arbitrary PHP code via a crafted optionnewreportwday parameter in a preferenze action, which can be later accessed via option/php-stats-options.php...

CVE-2006-7172

Multiple SQL injection vulnerabilities in php-stats.recphp.php in PHP-Stats 0.1.9.1b and earlier allow remote attackers to execute arbitrary code via a leading dotted-quad IP address string in the 1 PC-REMOTE-ADDR HTTP header, which is inserted into $SERVER'HTTPPCREMOTEADDR', or 2 ip parameter...

CVE-2006-7173

Direct static code injection vulnerability in admin.php in PHP-Stats 0.1.9.1b and earlier allows remote attackers to execute arbitrary PHP code via a crafted optionnewreportwday parameter in a preferenze action, which can be later accessed via option/php-stats-options.php...

CVE-2006-7173

CVE-2006-7173 affects PHP-Stats prior to 0.1.9.1b. Description: direct static code injection in admin.php allows remote PHP code execution via crafted option_new[report_w_day] in a preferenze action, which can later be accessed through option/php-stats-options.php. NVD assigns a HIGH base score (...

CVE-2006-7172

Multiple SQL injection vulnerabilities in php-stats.recphp.php in PHP-Stats 0.1.9.1b and earlier allow remote attackers to execute arbitrary code via a leading dotted-quad IP address string in the 1 PC-REMOTE-ADDR HTTP header, which is inserted into $SERVER'HTTPPCREMOTEADDR', or 2 ip parameter...

CVE-2006-7172

CVE-2006-7172 affects PHP-Stats up to version 0.1.9.1b. Multiple SQL injection flaws exist in php-stats.recphp.php that allow remote attackers to execute arbitrary code via the (1) PC-REMOTE-ADDR HTTP header (in $_SERVER['HTTP_PC_REMOTE_ADDR']) or (2) ip parameter. The header infers a leading dot...

CVE-2006-7173: Undefined Security Weakness

Direct static code injection vulnerability in admin.php in PHP-Stats 0.1.9.1b and earlier allows remote attackers to execute arbitrary PHP code via a crafted optionnewreportwday parameter in a preferenze action, which can be later accessed via option/php-stats-options.php...