FireStats < 1.6.2 Multiple Vulnerabilities

According to its version number, the install of FireStats running on the remote host is affected by multiple vulnerabilities : - A remote file include vulnerability in the 'fsjavascript' parameter of 'firestats-wordpress.php'. CVE-2009-2143 - An unspecified SQL injection vulnerability...

CVE-2009-2143

PHP remote file inclusion vulnerability in firestats-wordpress.php in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the fsjavascript parameter...

CVE-2009-2143

CVE-2009-2143 affects the FireStats WordPress plugin prior to 1.6.2-stable. A remote file inclusion exists in the fs_javascript parameter of firestats-wordpress.php , allowing an attacker to execute arbitrary PHP code by supplying a URL. The vulnerability stems from insufficient input handling, e...