EUVD-2005-3954

Malware in sbrugna...

FreeWebStat 1.0 - Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/15601/info FreeWebStat is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to hav...

CVE-2005-3959

CVE-2005-3959 affects FreeWebStat 1.0 rev37. It describes multiple cross-site scripting (XSS) vulnerabilities where user-supplied input in the (1) site, (2) jsref, (3) jsres, (4) jscolor parameters to pixel.php and (5) the search key to stat.php are echoed into logdb.html without sanitization. Th...

CVE-2005-3959

Multiple cross-site scripting XSS vulnerabilities in FreeWebStat 1.0 rev37 allow remote attackers to inject arbitrary web script or HTML via the 1 site, 2 jsref, 3 jsres, and 4 jscolor parameters to pixel.php, which are not sanitized before being included in the logdb.html file, and 5 the search...

CVE-2005-3959

Multiple cross-site scripting XSS vulnerabilities in FreeWebStat 1.0 rev37 allow remote attackers to inject arbitrary web script or HTML via the 1 site, 2 jsref, 3 jsres, and 4 jscolor parameters to pixel.php, which are not sanitized before being included in the logdb.html file, and 5 the search...

FreeWebStat 1.0 - Multiple Cross-Site Scripting Vulnerabilities

FreeWebStat 1.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15601/info FreeWebStat is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker ma...

FreeWebStat 1.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/15601/info FreeWebStat is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed i...

[Full-disclosure] Free Web Stat Multiple XSS Vulnerabilities

FreeWebStat Multiple XSS Vulnerabilities Name Multiple XSS Vulnerabilities in FreeWebStat Systems Affected FreeWebStat verified on 1.0 rev37 Severity Medium Risk Vendor www.freewebstat.com Advisory http://www.ush.it/2005/11/25/free-web-stat/ Author Francesco "aScii" Ongaro ascii at katamail . com...