CVE-2008-0125

CVE-2008-0125 describes a cross-site scripting (XSS) vulnerability in phpstats.php of Michael Wagner’s phpstats 0.1 alpha, exploitable via the baseDir parameter. The issue allows remote attackers to inject arbitrary web script or HTML. Public sources consistently identify phpstats 0.1_alpha as th...

phpstats0.1-xss.txt

Online at: http://int21.de/cve/CVE-2008-0125-phpstats.html Cross Site Scripting XSS in phpstats 0.1alpha, CVE-2008-0125 References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0125 http://www.michael-wagner.de/software/phpstats/ Description phpstats is a tool creating statistic...