CVE-2007-2847

CVE-2007-2847 describes multiple cross-site scripting (XSS) vulnerabilities in HLstats 1.35 (and possibly earlier) affecting hlstats.php. The flaws allow remote attackers to inject arbitrary web script or HTML via the (1) authusername or (2) authpassword parameters, with vectors different from CV...